RHSA-2026:83822
Vulnerability from csaf_redhat - Published: 2026-10-16 17:11 - Updated: 2026-10-20 17:16Summary
Red Hat Security Advisory: Red Hat Quay
Severity
Important
Notes
Topic: A new version of Red Hat Quay is now available.
Details: Red Hat Quay
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-102994
Known not affected
27 products, the same list as for
CVE-2026-102994
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Red Hat Quay is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Quay",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:83822",
"url": "https://access.redhat.com/errata/RHSA-2026:83822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102994",
"url": "https://access.redhat.com/security/cve/CVE-2026-102994"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102998",
"url": "https://access.redhat.com/security/cve/CVE-2026-102998"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83822.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay",
"tracking": {
"current_release_date": "2026-10-20T17:16:29+00:00",
"generator": {
"date": "2026-10-20T17:16:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:83822",
"initial_release_date": "2026-10-16T17:11:32+00:00",
"revision_history": [
{
"date": "2026-10-16T17:11:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-16T17:11:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-20T17:16:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.17",
"product": {
"name": "Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1792003561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Aace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1792004014"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791848775"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1791849552"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Ab06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792026771"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791848002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791849089"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3Add1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792071725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Ad968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1792085906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Ab46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792072128"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3Aa718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1792003561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791848775"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Acc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792026771"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Aabd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791848002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791849089"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3A2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792071725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792072128"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3A5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1792003561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791848775"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Ae58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792026771"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Aeca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791848002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791849089"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3Ace0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792071725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Ae2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792072128"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-rhel9-operator@sha256%3Aa92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-rhel9-operator\u0026tag=1792003561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-rhel9-operator@sha256%3A9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-rhel9-operator\u0026tag=1791848775"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Aad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1792026771"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ac0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1791848002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Ae8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1791849089"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9-operator@sha256%3A78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9-operator\u0026tag=1792071725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Ad0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1792072128"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-102994",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-30T20:11:27.869277+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544270"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pypdf. By supplying a specially crafted PDF document containing excessively long indirect object identifiers or generation tokens without whitespace, a remote attacker can trigger unbounded input scanning during parsing. This issue causes significant processing delays and excessive resource consumption, leading to a Denial of Service (DoS) and application unavailability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact flaw can make a Red Hat service unavailable when pypdf parses a crafted PDF with excessively long indirect-object tokens.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102994"
},
{
"category": "external",
"summary": "RHBZ#2544270",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544270"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102994"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102994"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e",
"url": "https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/pull/4055",
"url": "https://github.com/py-pdf/pypdf/pull/4055"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0",
"url": "https://github.com/py-pdf/pypdf/releases/tag/6.18.0"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246",
"url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246"
}
],
"release_date": "2026-09-30T19:57:37.810000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-16T17:11:32+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83822"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files"
},
{
"cve": "CVE-2026-102998",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-30T20:32:15.895525+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2544283"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pypdf. A remote attacker can exploit this issue by submitting a specially crafted PDF document with specific form field values. When an application updates these fields with flattening enabled, redundant computational operations are repeated inside a loop during appearance stream generation. This excessive workload consumes processing resources, leading to application unresponsiveness and a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pypdf: pypdf: Denial of Service via crafted PDF form fields",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important impact flaw can exhaust resources when a Red Hat product uses pypdf to flatten form fields in a crafted PDF; ordinary PDF reading does not trigger it.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102998"
},
{
"category": "external",
"summary": "RHBZ#2544283",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2544283"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102998",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102998"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102998"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7",
"url": "https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/pull/4087",
"url": "https://github.com/py-pdf/pypdf/pull/4087"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0",
"url": "https://github.com/py-pdf/pypdf/releases/tag/6.19.0"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj",
"url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj"
}
],
"release_date": "2026-09-30T20:09:13.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-16T17:11:32+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83822"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:551ac51bd24bfc645cd2058f5c9870a23494bfd7ac74b517e2991ce239b22c66_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:703316ec0e97837a05c025d422101ae83b2262d6a36c9d4045aadc02662df523_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:9c51fdcb67700ef2ec1f2ce405420a92e9776657fa4ca0e86898e97ac946822c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:e8c1d15076b509b82322d2a36aada689686536889347b632763f5ba6eef47cda_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:20df0874388051cfeafc1c861250a1d62576404b58135949770adbb62036adfd_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:0376a7856c87f47f7f1102359f8235ebad33089c1fb3a831c97d818ad6aefffa_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:683a5d90caf8c762a0a2a2523978d5e6dda63418ca00da66a83b9a341cb88552_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:815790259155f18cb0e97cda94c9ba57b569449e390ee8edf16b31d4a29638e1_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:9e50d6cbe79f64844deead5ac1f12d1017535d7f4bbad8ecb13279ba12519d4f_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4259c22e02acb8e9b0d29a48576b79c4999bef094057a0a63383a5a84ac12404_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:abd978d450485fa53641d4d38c869c5169fbb522b4de1004f92b1bcba1147460_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c0c160954b32398e6ade7a5c9aa53cbb27777e63f579b78b7088ff27de32b712_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:eca8d41fa5545010594b93d48536fad760b68531ff6ca7d78e84120ae48e1938_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:ad7a70963fc5ca4bbe970db485c28bca6d53f37d09792b1b8e64f74eaa33b623_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:b06f7aba798a7ea01fbb04705815280ab7d5d1b7a637263049f0f8dfe90530ad_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:cc11410ef6d8eab0def018e1cadbddbff8c50f4cb17af8dbf94a31cef7f21981_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:e58fc5e302cb064ac93d0b6bb51e95812dc53b99db85d08b64b04ff8c23367fe_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ace99e59bbb066afa1c18eddabe30e836b5903728956dbaa4cd18b4988f38dc3_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:5f60f635248794bc0fbb3601d25e1b862caca6a18ec7a06fded17002a1588e03_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:76bdb31251000e123e4bff75427ef38a5a11ee1ca8dba40301240aaf9149f311_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a718f33135ce63d045d7bca609254f55d7883b1b50c993767126d7fcc657df3f_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:a92b6c708e141eb79173157a0a8c8e442740b9e3ec5e4b89d9c03640d55d9858_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:d968d017618c89e1b182a15b2a82f4fbe3859a603dea2b6c4d842a59f95e7d5a_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:2d84960bec995da6c3543061d1f5e30af19c9acc4fb4abe743130ced6f0bd6ac_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:78a809afe98430e853a8dfee4739f8ca4937c43d178f561e48654ccfdf01ae97_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:ce0ce00caa554e0a2eb079492e921b364d1853a9bcdbf25b3a8c5a20aa91f529_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9-operator@sha256:dd1b0855abaec32b87e64a11e89ed282b075069021cceb139d523349b7c3e909_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:83fdc6938c06ed1e555bfdc6742cca3af9e37af0fc8144dd95c7dd2bef604061_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:d0eb356ef5469973e81a00f048e19a77ea4b99d70b0079e027b1f11abbf2d24e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:e2f1268505e0669a705b8e4c443285e7c6d4481e0f1532fe46c2d3cf7bf24487_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pypdf: pypdf: Denial of Service via crafted PDF form fields"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.