Vulnerability-Lookup

RHSA-2026:99960

Vulnerability from csaf_redhat - Published: 2026-11-12 23:56 - Updated: 2026-11-14 04:48

Summary

Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.8 security update

Severity

Important

Notes

Topic: Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.

Details: The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Workaround

Threats

Impact Important

CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 120 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 120 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-39822

A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix Workaround

Known not affected 84 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-39834

A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Vendor Fix fix

Known not affected 120 products

Product	Identifier	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64		—

Threats

Impact Moderate

CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 120 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 28 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix

Known not affected 96 products

Product	Identifier	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le		—

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 60 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix Workaround

Known not affected 64 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs

Affected products

Fixed 44 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix Workaround

Known not affected 80 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 56 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix

Known not affected 68 products

Product	Identifier	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le		—

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 52 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix

Known not affected 72 products

Product	Identifier	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le		—

Threats

Impact Important

CVE-2026-56864

A flaw was found in golang.org/x/mod/sumdb. A malicious Go checksum database (GOSUMDB) can serve arbitrary module content that is not recorded in the transparency log. This allows a coordinated Go proxy (GOPROXY) and GOSUMDB to deliver malicious module content to a client, which cannot be detected by examining the transparency log. This vulnerability could lead to a supply chain compromise, allowing attackers to distribute malicious code.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-494 - Download of Code Without Integrity Check

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Workaround

Threats

Impact Important

CVE-2026-56865

A flaw was found in golang.org/x/mod/sumdb/tlog. A malicious Go proxy (GOPROXY) could exploit this vulnerability by forging sumdb tiles. This allowed the proxy to bypass integrity checks and serve malicious module content to a local Go module cache, which would then go undetected by the transparency log. This could lead to a supply chain compromise where users unknowingly incorporate compromised modules.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-56864

Known not affected 120 products, the same list as for CVE-2026-56864

Threats

Impact Important

CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-823 - Use of Out-of-range Pointer Offset

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Workaround

Threats

Impact Important

CVE-2026-84304

A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Vendor Fix fix Workaround

Known not affected 92 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-93748

A flaw was found in http-cache-semantics. This vulnerability allows unauthenticated attackers to retrieve cached responses, including sensitive session credentials like Set-Cookie values, belonging to other users. This occurs because the component fails to properly validate security-zeroed cache entries when processing client `max-stale` directives. By requesting the same URL with a large `max-stale` value, an attacker can obtain another user's session credentials from shared-cache entries that were intended to be secure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-524 - Use of Cache Containing Sensitive Information

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4b56010abd5793af0eb975f0e8e6b3a7f8add086808db359a6da7e2ba1da9eda_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9fcabe37eb19b7590916b1808d7374bd42cd3b1a32babd233c991700f720254b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:bd796b95bdfaa1c216aa2d641953491a1ecda9644fa6471bc3b1b0ab0ac6faa4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c52bb40d03b393567049d3631d55bbdc5cf9582004456ac5358d3f34902a5070_ppc64le	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:23a3d794c715f41a11c55d7761e23d4edb8737aabab59fd5f2cf0aec31adeb4c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6dcbc74af9f38d50baf2d15ba8ae12c487ad2d26d4355b35e4ccdcdfa1c5a07d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9278e92a7cb8726b98cf2702a318241f86fc5a4258d0d53b849e98436c776a51_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b7cc67058cc6bd935be3ba7a6011fbf599cf4305142e609216b4f73365fd6cac_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:067fa4138cffc6365e3cfeb61ff31eee08817c8fb441b9510c1c029440f5b385_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:157af2a7b431767610760b0be223daf2f0f03e100343b3ac9dfd03f386cbc8d5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:8165438f1acafc709f884955b95551c51ba84f0d9bc8ef303c8a7bd5b689d67b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:a4016f5f4ae3038a9a43271faf570215cd210c3510244b7002e691fa43f4d0cc_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:55e61a327b77ab9e8071f9fe87114466e006317fc364eb7560ee4b1aceb9a431_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:5ff973ec970b8e6ae44f27ffda8a7c85e72ae7160a94875dfac7c234f6a5ec23_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6f32a8c777eb73551ce3a5430c6393b49095c0f20e45f446b26de7468d26349c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:af97e6c3934b64a2bd35f8efc465399ea00a9d1dc34d8f400c47c3df78d65218_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:3fcf56ec77402e5c6fd31bdb0c4ca62c6e07df78d4ffa9fbf1cceb4ac9011e44_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:6f769f808e507914e0566464d22f17e8abf3b0bd36dd30c0c038675104a3a00a_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e36f0073195ab699af369bdb1f0fbb62afa30d93d8806da587f9916b71d428d2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:f652ea3b17ab7b48a7bb259a1faeaf0494aa445b64908d759b3c536b9b41fb25_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22e9ab7e93c9fa670ec6d36ee8818eb94b419af4aa9f6347ad35944b44e5a38c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5583f100a774769fb94c81841c7e8c76ad4cfd4e1725e2222e2c4d17a3d17015_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c8dc44d6770c375cf0231e3048611eade3545dd06b70ce46b0834cb008adf4b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:f9920b9dd1ccd2b56d7f291588abd364e5b8f8f66dcf583f21f159790090d58d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:13e5aed027e22fd322244ce0791a0e7192837fab2dcad355c748a40dd23aa03f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7c8d8ef758ebd446ba1220303bc669191d547a4b57bf74ffd95a2e345e617120_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c4e374e8d897a5379a04b6412f9356374fe0cec32d14dcf9e99f686b22975518_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:c8e08400c7b84ff73d48fc926c67ed12dd0bdf52af9ecd5cc5a6b3e714bfcc7b_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0769c619a5835b1b1ead188aafebe07e721b87d927f512c95c96ce84ee9e4644_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:21f2d9ffe80457526e91b6de3e8ed876b1511ec2116d640f3f496e1caca3bda5_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c681a6ddeab2efbf97011e0c8387f3027bc88897775584744c4ea425eca6350f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:d307340b0e1fe818a56c2ba256fcaed39777d4a196a380d4b66d2b2de4d43689_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2025249157889aaa22edc373a11cc1d9f3b3b9612f73b30ce969f37e9198482d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4f749fdc72f76dcda354b3d264727de639f33485ee3b6bb93d187458ba3407ca_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:7df9abe245e42576a04a88a45f53a51ea76142092c111984c189aa9743198522_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c1e229293420fbf1082eb8c451ba530dac059467fc91b1a8f5fbb93e4125a642_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:02569831b12f1e53e66afb20de2b039563024489fd76d2a3dcec7b76fc1ffa6f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4d5ff977d45ce55e4c6072133c8a2a0a40125f7c032f15e500d8d153e0c9a077_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:5c93ad788455f92884786ca837d2f44a5aa9755403c68faa9243006b076bdfa0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:9b8b4280cdb467d3e0e60ffbb76d0fe07926887c63a49a12d3d4efd8d75bbe03_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:03d970011a9d572656d8f7923ce9cd2ddb0d247e6d3afbbc8396fca533a0f1c5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:69286e2297ae78ee214b9f582a936c5ee2c23a3ea3b0980184d784fe3a0adb65_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:81ff69c495835207bd3d4a8f65f13e5883fb654513a7feed248cc7d043657fb3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:a771559e2d8aa91954f8214f6168384b3570274389cfc50c61f76a05aacf0908_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6071ebd85651aa6d7dd43229db54fb7eb0df28be7c1535296d0dabcbf5578161_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:75ff879339ceb4c00d4532ded441c56d0fec0ec37ad489caf0bd327e874d65ca_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8e24f75621f63a96b7626b8ecfcafc19dc7c5b6e06ee1da7f45d9c292a877117_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:cf3e241aeeb4688b6ddbafdb7f23aaec70dafc729f7f9c2aaca9f1779feef749_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4607a6781ac8a4265e5e9bd0deb15b75e458cd8fadd54870f18a043a70375ee3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:5bd31f633110f544e215dce65f4531478eb7ddd835eaed3b37b1df38b3af74f7_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b58ee0e9967f6238964997ad9558581dbf0d5d4a2c8a6fb6a4bc092012f5f1ec_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f276aadb1acce70963e04547fa651e91003579e8680e2be928cad7a2ddd02727_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:7643cf902f7121152fe7eb09f8b8f81ed85c970bec5471922c77607a07945609_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8c68e00783e48e24ab72bbc8120061abb9d9cbc003ee5575ad26dde74381946f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a12971d96ff2b2331c44c9cd26aa7296b09861d98b37d92d98b85bab1f7e4fa1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:db1e25b0c86f68400a2dee1b564a5b1327da7100031f2be37024dc5c5f210bf1_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6f5b914320494892584bc5f68468f5f9d287a9078bca5d14609b7f6bf5eab4d3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b3c7238a7f94da7ddd91c0afb3d91567c831b7d0a90d879a0593118e76bb58a8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c5504d93cf6f24b2df31fa7855e67f8b857fbadd6fca155585c0414825048216_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e8e7bb84363bd61aa8919cc11ee2afad047270f8274a3a93e5a2a33b1db3db5d_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1bf136da13e3d193fb4103dae5ca4af77d003ab332c73d0ca989126cd031edd8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d40f45141fd26567f998912fd5e0fbdb9746228a609940deeb820d30fc952e7_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:443799bd46b6318fac58199dca4cfae24661339bf3c6dd3006ae3142fbd6dad6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:72e86d18e5e2437e98eb026eba69ade06b1258d3a6a4a43535c6971b7d01013c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:15d416f3ba4a4a341616f84ceac041233ec66cddfbc3308fabbba6b5bc7f76d6_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:84bbebabfc1a39ca7307b8cbb9aeef1940b5eea9e201e3c3d49e0ca351ed3bfa_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:90855957902fcd64ab7a7fb6d2db0a50fca1c32ba42eeeba3d37ff41c39d0a34_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:df78ed891618ee4150d24dd3460da458db0457cd163c323c732e6a4ab9998da5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1c27c71fe9513c8224adedd5f6c40bef6cfcff15e7d0f904f13a10907e1e5743_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:615b0617871e88b41da971dd92d7fd02b0b74c55c3ce445d33b02fadf7105ec3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:68525613c6d00ef9363e0a9378cbf106c97753bf91e40af420742063bc954b06_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e8317cc9afa0df6590459c832195c645f446d789644ed1cf89a0c3494d306565_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1429918dfa506bbdcab2f3cfcc257c56c7e47b1d3b06fe8883e151e967c124f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:645666ef29261f87b550477aa6ba0bb1bcacc196d1fae6bbb6e61479ed30dc29_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:824c387b5cf2ac6cd845776d901954d60cb8cccee5da3ec17aa1db5843be0166_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c1b75253b3678ec829bc20a1b453c9dbf42fd7c6ff47a3fedfe344a7783c892f_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4689b28f533a28cab19a8c579b493e61666bd36043e4b6a613603461e8cb4e9a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:53aa664454c24665d7a9e6fcbb228b8a426766f28c758daf83686c62380565e5_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:945be2cffdb81bbb261f142776e46713dcf4cccdad970e20aeedcbb27bf6eb6b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:eef12a98355abf554945501d3340b22e95ffae10d8b2e5878b6b0449a535e6ce_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:406284367f864c2f3deb116fb8bbd2a7e3bb72f803d74848bcdf9dce2016c95b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:738a93e58294c030d05f7a05a466fda759ac899761ca5f0c0408f614dd246c0f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dc1ac1c3fe30d94843a3a053e063a172529fd7d20f46a5cf4ae5b2117790f0d3_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fe07a5c6c620af0a9cc1083b7a5958f4fe7bf65524af5b316bdd999c27733769_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:622170e8e1e199a9ced177cc762f1da24d6afbed96f96278d379020fdc6197d4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:69a96f31865f85cbed98cabcc3bf8afe41ce58318e9cbf93e551d28f264fd2be_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:889c579e21465d151817d60147cde6673713aca3c2bbf08001be7441ed972418_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c575929e179a50b47cd921ca5ed41afd79c4fe51aa4a4dcc49728395e6e0fe8b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:15dc18a2a768eec0ddafdce26d46e37a7c3e812ff228265c2e8b8246531c0685_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6acf70096740b1344c2fa044c1a4665939248fcf5588974ae835340139b4fce9_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ae49905872ef877c963c8f6587042383080fe83118757a9fa6025a4c0e7f5ee3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b678f5f62b30317587f45b2342c00e419a15b747fd5740f9ed4c36d63a49304c_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:1bbda088bc613177ebf0611e7d1d224332bd43d5da6c2624580c7faec9466e99_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:27c1a954fe8aa2c3ab34ff7998048c9ace376b226e94a7416dbabd9db68a77ea_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2fcf84de5e977e44ab46887a419164109bd7ff5b51a2eba5926b325cfc23c4f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:782291573ae086560792da4966c92a13dab0b678bb2cc570a2abd556a5fa27c5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23af8051eada5b42afb065449fff584b8d263f55cb29b0ea1df7dd4f66985bdf_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3fb93f84a5f78e4fa872b82f82de652fa0205f51888d9d05fff1a44271be27e3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a47bb1eabebf561be4d4848a0f8ced2c6ffa9b54c8ed9c17467594047fe7147c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b68ee2a522b20e2ab0350365871804408e5a4de25573340c03aef4118a3e5496_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:31e13d158c359a2a358b892f6a1cec4e12d9adc9eaf76d357e66be73cc8a9a74_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6ba63399f86636e6fd95a6e89594d6b9313f80b08a59658793889b1ad0bcb1a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c56bbc6a916c3ea39f1aa3998a1afec8b83e2477e00735a67c56ab422e753b7a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:e529fe7d4dc4f6132f4556bf189e060c150b4b7250c8c46ab7031f3cfc1baa99_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:72e80ed11ce31a4b0c0573fd83b8d2b1143d9fcc4072ae6589f474c0801e6248_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:980a0f62427d855d3e455cbe69e94b848fd2c249bd3c9395b04c9b55ea44094e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a0b48cd23d2ad357c40ee0655704bce57f18af40e44668f45150059e62759e7e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ef7619d2d4240b3cba939dd04a1274a7dcac03481c6bfe6bf522a946f790448b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1036d22b57de6d4febffbb61e040fc75b81201492e819fa312c6555dd83cdcec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7bfe2a659d103e6433d3a2d19b6db9168d9202071f8f0ddff8b8ef6e9a8b9b99_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ca24ca03c91e97ba7aec3fda5b4beba2bf63f2fb9e9532ba3ad72617f928d99e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df1981cffbcb93e2d17b321e3805bc97c6c04b10a2ff16da193c954b1b0153a9_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:13b15513139419c6b451db91a576309a60f00c3065c1af3643dbd66316b34535_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:31c1e7e9ee247fd7097801e2ada805066fd90f396676516f030d5fd650c12450_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:3361f401bb8a7b26f5baa94718ba00a0b9f972890fdf2e9a61a58fd0006f45fe_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:a7eefdba4c1869382a7c8dff22a1923f66d7f854fb3dbeeb88bd4d15b8ba66b0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:48627373453a2f88347df0cbad521a1024a979a397f959a8f4699417f1af5ca0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:6f89a319dad4e69a3d67ff94357f7ec53b37fb9951e6e8a55e09939b731c47cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:768700c388795a4c4bd9def7cc8e624e8d96c4a6158e0dfadadaa148d5b51449_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e41d12c96c12e64777e395fcf9e1109a2b6f9ce60580cffe1a8aa9189793eca5_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8300425118ec696a1f3cc26338207ff19d4c6e0757450b14704763d858122dfb_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b45dc2d198d5c0e3be9255e79ecbbc2f3ee6f8f8696fc276d252b31c18c193a6_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:d07d52a4846e93369fcca20d70cd5e7d3196e004f2bb6f1933753109d2b63ac8_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:f40bf20126821d54617bf24204960e83e72bcc4cbd735297e22a71ced23e37fb_arm64	—	Workaround

Threats

Impact Important

CVE-2026-106445

A flaw was found in Handlebars. The lookupProperty own-property check returns Function.prototype.constructor before the prototype-method deny list is applied. When an attacker can render a controlled template with allowProtoMethodsByDefault enabled and an accessible function in the template context, arbitrary JavaScript can execute with the application process privileges.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 4 products, the same list as for CVE-2026-93748

Known not affected 120 products, the same list as for CVE-2026-93748

Threats

Impact Important

CVE-2026-106446

A flaw was found in Handlebars. Incomplete validation of pre-parsed AST objects passed to compile() or precompile() allows unchecked AST fields to be emitted into generated JavaScript. An attacker who can supply an object instead of a template string can inject and execute arbitrary JavaScript in the application process.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code

Affected products

Fixed 4 products, the same list as for CVE-2026-93748

Known not affected 120 products, the same list as for CVE-2026-93748

Threats

Impact Important

References

156 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:99960	self
https://access.redhat.com/security/cve/CVE-2026-106445	external
https://access.redhat.com/security/cve/CVE-2026-106446	external
https://access.redhat.com/security/cve/CVE-2026-25681	external
https://access.redhat.com/security/cve/CVE-2026-27136	external
https://access.redhat.com/security/cve/CVE-2026-39821	external
https://access.redhat.com/security/cve/CVE-2026-39822	external
https://access.redhat.com/security/cve/CVE-2026-39834	external
https://access.redhat.com/security/cve/CVE-2026-41178	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-56864	external
https://access.redhat.com/security/cve/CVE-2026-56865	external
https://access.redhat.com/security/cve/CVE-2026-63209	external
https://access.redhat.com/security/cve/CVE-2026-84304	external
https://access.redhat.com/security/cve/CVE-2026-93748	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-25681	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761	external
https://www.cve.org/CVERecord?id=CVE-2026-25681	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681	external
https://go.dev/cl/781703	external
https://go.dev/issue/79574	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5029	external
https://access.redhat.com/security/cve/CVE-2026-27136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757	external
https://www.cve.org/CVERecord?id=CVE-2026-27136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136	external
https://go.dev/cl/781685	external
https://go.dev/issue/79575	external
https://pkg.go.dev/vuln/GO-2026-5030	external
https://access.redhat.com/security/cve/CVE-2026-39821	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	external
https://www.cve.org/CVERecord?id=CVE-2026-39821	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821	external
https://go.dev/cl/767220	external
https://go.dev/issue/78760	external
https://pkg.go.dev/vuln/GO-2026-5026	external
https://access.redhat.com/security/cve/CVE-2026-39822	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498152	external
https://www.cve.org/CVERecord?id=CVE-2026-39822	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39822	external
https://go.dev/cl/797880	external
https://go.dev/issue/79005	external
https://groups.google.com/g/golang-announce/c/Orm…	external
https://pkg.go.dev/vuln/GO-2026-4970	external
https://access.redhat.com/security/cve/CVE-2026-39834	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480676	external
https://www.cve.org/CVERecord?id=CVE-2026-39834	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39834	external
https://go.dev/cl/781663	external
https://go.dev/issue/79567	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5020	external
https://access.redhat.com/security/cve/CVE-2026-41178	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830	external
https://www.cve.org/CVERecord?id=CVE-2026-41178	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-56864	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515836	external
https://www.cve.org/CVERecord?id=CVE-2026-56864	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56864	external
https://go.dev/cl/815000	external
https://go.dev/cl/815020	external
https://go.dev/issue/80745	external
https://pkg.go.dev/vuln/GO-2026-6180	external
https://access.redhat.com/security/cve/CVE-2026-56865	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515830	external
https://www.cve.org/CVERecord?id=CVE-2026-56865	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56865	external
https://go.dev/cl/814960	external
https://go.dev/issue/80744	external
https://pkg.go.dev/vuln/GO-2026-6179	external
https://access.redhat.com/security/cve/CVE-2026-63209	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543236	external
https://www.cve.org/CVERecord?id=CVE-2026-63209	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63209	external
https://github.com/klauspost/compress/commit/5392…	external
https://github.com/klauspost/compress/releases/ta…	external
https://github.com/klauspost/compress/security/ad…	external
https://access.redhat.com/security/cve/CVE-2026-84304	self
https://bugzilla.redhat.com/show_bug.cgi?id=2526955	external
https://www.cve.org/CVERecord?id=CVE-2026-84304	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84304	external
https://github.com/grpc/grpc-go/commit/7354d9c8de…	external
https://github.com/grpc/grpc-go/commit/8cfeca0e1e…	external
https://github.com/grpc/grpc-go/pull/9331	external
https://github.com/grpc/grpc-go/pull/9333	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.1	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-93748	self
https://bugzilla.redhat.com/show_bug.cgi?id=2538111	external
https://www.cve.org/CVERecord?id=CVE-2026-93748	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93748	external
https://github.com/kornelski/http-cache-semantics	external
https://github.com/kornelski/http-cache-semantics…	external
https://github.com/kornelski/http-cache-semantics…	external
https://github.com/kornelski/http-cache-semantics…	external
https://www.vulncheck.com/advisories/http-cache-s…	external
https://access.redhat.com/security/cve/CVE-2026-106445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547112	external
https://www.cve.org/CVERecord?id=CVE-2026-106445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106445	external
https://github.com/handlebars-lang/handlebars.js/…	external
https://github.com/handlebars-lang/handlebars.js/…	external
https://github.com/handlebars-lang/handlebars.js/…	external
https://github.com/handlebars-lang/handlebars.js/…	external
https://access.redhat.com/security/cve/CVE-2026-106446	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547120	external
https://www.cve.org/CVERecord?id=CVE-2026-106446	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106446	external
https://github.com/handlebars-lang/handlebars.js/…	external
https://github.com/handlebars-lang/handlebars.js/…	external

JSON

To clipboard

Loading 1.9 MB of JSON…

CVE-2026-106445 (GCVE-0-2026-106445)

Vulnerability from cvelistv5 – Published: 2026-10-06 19:39 – Updated: 2026-10-12 14:33

Title

Handlebars: JavaScript Injection via Own Property Check Bypass

Summary

Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker can render a controlled template with allowProtoMethodsByDefault enabled and an accessible function in the template context, the template can traverse from that function through its prototype to Function.prototype and then obtain the Function constructor through the own-property bypass. This permits attacker-controlled JavaScript to execute with the server application's privileges. This issue is fixed in version 4.7.10.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 01:42 UTC

CWE

CWE-184 - Incomplete List of Disallowed Inputs
CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_CONFIRM
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_MISC
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_MISC
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
handlebars-lang	handlebars.js	Affected: >= 3.0.0, < 4.7.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106445",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T01:42:53.531967Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T01:43:16.576Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "handlebars.js",
          "vendor": "handlebars-lang",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 4.7.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker can render a controlled template with allowProtoMethodsByDefault enabled and an accessible function in the template context, the template can traverse from that function through its prototype to Function.prototype and then obtain the Function constructor through the own-property bypass. This permits attacker-controlled JavaScript to execute with the server application\u0027s privileges. This issue is fixed in version 4.7.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-184",
              "description": "CWE-184: Incomplete List of Disallowed Inputs",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1289",
              "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T14:33:33.060Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f"
        },
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/pull/2185",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/pull/2185"
        },
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa"
        },
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"
        }
      ],
      "source": {
        "advisory": "GHSA-p8wg-vrv2-v86f",
        "discovery": "UNKNOWN"
      },
      "title": "Handlebars: JavaScript Injection via Own Property Check Bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-106445",
    "datePublished": "2026-10-06T19:39:08.916Z",
    "dateReserved": "2026-10-06T16:49:40.590Z",
    "dateUpdated": "2026-10-12T14:33:33.060Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-106446 (GCVE-0-2026-106446)

Vulnerability from cvelistv5 – Published: 2026-10-06 19:41 – Updated: 2026-10-07 18:30

Title

Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)

Summary

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects while validating only selected PathExpression, NumberLiteral, and BooleanLiteral values. This issue bypasses the AST validation introduced in version 4.7.9 for CVE-2026-33937. An attacker who can supply an object instead of a template string can place JavaScript expressions in unchecked values such as Program.blockParams.length, a non-PathExpression parameter depth, a non-string StringLiteral.value, or a non-string PathExpression.original. The compiler emits those values into generated JavaScript, causing code execution in the server process when compile output renders or wherever precompile output is loaded. Applications that pass only template strings are not affected. This issue is fixed in version 4.7.10.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-07 18:27 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_CONFIRM
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_MISC
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_MISC
https://github.com/handlebars-lang/handlebars.js/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
handlebars-lang	handlebars.js	Affected: >= 4.0.0, < 4.7.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106446",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-07T18:27:28.577129Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-07T18:30:12.451Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "handlebars.js",
          "vendor": "handlebars-lang",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.7.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects while validating only selected PathExpression, NumberLiteral, and BooleanLiteral values. This issue bypasses the AST validation introduced in version 4.7.9 for CVE-2026-33937. An attacker who can supply an object instead of a template string can place JavaScript expressions in unchecked values such as Program.blockParams.length, a non-PathExpression parameter depth, a non-string StringLiteral.value, or a non-string PathExpression.original. The compiler emits those values into generated JavaScript, causing code execution in the server process when compile output renders or wherever precompile output is loaded. Applications that pass only template strings are not affected. This issue is fixed in version 4.7.10."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "CWE-843: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T19:41:55.785Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj"
        },
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/pull/2185",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/pull/2185"
        },
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2"
        },
        {
          "name": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"
        }
      ],
      "source": {
        "advisory": "GHSA-8r5x-fm3f-whwj",
        "discovery": "UNKNOWN"
      },
      "title": "Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-106446",
    "datePublished": "2026-10-06T19:41:55.785Z",
    "dateReserved": "2026-10-06T16:49:40.590Z",
    "dateUpdated": "2026-10-07T18:30:12.451Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25681 (GCVE-0-2026-25681)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 17:46

Title

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Summary

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 17:46 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/79574
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781703
https://pkg.go.dev/vuln/GO-2026-5029

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-25681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T17:46:00.775026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T17:46:20.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:21.975Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79574"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781703"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "title": "Invoking  incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-25681",
    "datePublished": "2026-05-22T15:01:21.975Z",
    "dateReserved": "2026-02-05T01:35:43.738Z",
    "dateUpdated": "2026-05-22T17:46:20.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27136 (GCVE-0-2026-27136)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 16:59

Title

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Summary

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 16:59 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/79575
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781685
https://pkg.go.dev/vuln/GO-2026-5030

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27136",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T16:59:35.355098Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T16:59:52.807Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:22.111Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79575"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781685"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "title": "Invoking  duplicate attributes can cause XSS in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27136",
    "datePublished": "2026-05-22T15:01:22.111Z",
    "dateReserved": "2026-02-17T19:57:28.434Z",
    "dateUpdated": "2026-05-22T16:59:52.807Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39821 (GCVE-0-2026-39821)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-09-17 12:04

Title

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Summary

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-23 03:55 UTC

CWE

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

159 references

URL	Tags
https://go.dev/cl/767220
https://go.dev/issue/78760
https://groups.google.com/g/golang-announce/c/iI-…
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-5026
https://access.redhat.com/security/cve/CVE-2026-39821	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66350	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54580	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57845	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65851	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67517	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56143	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63134	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37436	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35827	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65534	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35830	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68504	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61245	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67159	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56223	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65886	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50843	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33524	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35994	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54284	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54285	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54274	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54283	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44624	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51341	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42048	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36105	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36167	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

317 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
Go standard library	net/http/internal/http2	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
golang.org/x/net	golang.org/x/net/idna	Affected: 0 , < 0.55.0 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.6-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-5.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:5.3.0-7.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-27.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.5-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-5.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:5.3.0-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2.21.0-2.el10_0.3 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-10.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.6.1-2.el10_0.7 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:10.2.6-26.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-11.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-31.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:5.1.1-16.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-2.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.7.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-23.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.1.1-17.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.5-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-7.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.15.0-2.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.1.1-5.el9_2.2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:3.2.0-2.el9_2.10 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4

50 of 317 products shown. All of them on the page of CVE-2026-39821.

Credits

KC1zs4 (https://github.com/KC1zs4) Longwei Wang (https://github.com/gn00295120)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39821",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-23T03:55:58.522682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:13:15.606Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-5.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-7.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-27.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-5.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-2.el10_0.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-10.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el10_0.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-26.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-11.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-31.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-16.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-2.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-23.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-17.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-7.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.15.0-2.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-5.el9_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.2.0-2.el9_2.10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.17.0-2.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-7.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-15.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-10.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el9_6.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202609011112-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-crio-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.21.0-202609021357.p2.g83d4961.assembly.stream.el10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782401674",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785418851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784747813",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782408807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786645107",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332008",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783333268",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783985999",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782477094",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782308518",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784306906",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783260894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785180878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787685239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156698",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157632",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157829",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/cluster-backup-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383255",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782488873",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-state-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157507",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/metrics-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782396604",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382711",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/node-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157546",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157471",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157018",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-alertmanager-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782374537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/rbac-query-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-receive-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156860",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782465412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784652040",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784740143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686458",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783352589",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783962464",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782804957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758410",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782754093",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-controller-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783953372",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785171639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784211378",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783946386",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788312157",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787102977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630755",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630724",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630124",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787153683",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787088234",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-spark-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787090180",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787361677",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782991491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-opa-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775770",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-jaeger-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775834",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-operator-bundle",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784777166",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782292352",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383826",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_snr:0.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/self-node-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203079",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-maintenance-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 5.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786181981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785923308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785929994",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784295767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/far-operator-0-8",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4",
              "cpe:/a:redhat:lvms:5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/mdr-operator-0-7",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-proxy-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/image-based-install-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/nhc-operator-0-12",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-cli-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-indexer-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-api-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/cert-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-client-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/memcached-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/search-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/submariner-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-5-dashboard-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-6-dashboard-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "unknown",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-fips1.25",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "atomic-openshift-service-idler",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/ovn-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T15:01:21.462Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T12:04:30.881Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
          },
          {
            "name": "RHBZ#2480756",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66350"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54580"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57845"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65851"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67517"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56143"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63134"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30855"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37436"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35827"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65534"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35830"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35831"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68504"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61245"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67159"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59562"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56223"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57541"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35828"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35829"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65886"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36808"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56340"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50843"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33524"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35994"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35993"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54284"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54285"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54274"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54283"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44624"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51341"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42048"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36105"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36167"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66350: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65851: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67149: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67517: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63134: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66432: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68504: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67319: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67160: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65359: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61245: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67159: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54395: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T16:00:52.844Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T15:01:21.462Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "idnaASCII"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Get"
            },
            {
              "name": "Head"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2RoundTripper.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "authorityAddr"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/idna",
          "product": "golang.org/x/net/idna",
          "programRoutines": [
            {
              "name": "Profile.process"
            },
            {
              "name": "Profile.ToASCII"
            },
            {
              "name": "Profile.ToUnicode"
            },
            {
              "name": "ToASCII"
            },
            {
              "name": "ToUnicode"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "KC1zs4 (https://github.com/KC1zs4)"
        },
        {
          "lang": "en",
          "value": "Longwei Wang (https://github.com/gn00295120)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-21T21:01:48.612Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/767220"
        },
        {
          "url": "https://go.dev/issue/78760"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39821",
    "datePublished": "2026-05-22T15:01:21.462Z",
    "dateReserved": "2026-04-07T18:13:03.526Z",
    "dateUpdated": "2026-09-17T12:04:30.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39822 (GCVE-0-2026-39822)

Vulnerability from cvelistv5 – Published: 2026-07-08 15:46 – Updated: 2026-07-08 19:39

Title

Root escape via symlink plus trailing slash in os

Summary

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-08 18:06 UTC

CWE

CWE-61 - UNIX Symbolic Link (Symlink) Following

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/79005
https://groups.google.com/g/golang-announce/c/Orm…
https://go.dev/cl/797880
https://pkg.go.dev/vuln/GO-2026-4970

Impacted products

1 product

Vendor	Product	Version
Go standard library	os	Affected: 0 , < 1.25.12 (semver) Affected: 1.26.0-0 , < 1.26.5 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.2 (semver)

Credits

Mundur (https://github.com/M0nd0R)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39822",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T18:06:16.360721Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-61",
                "description": "CWE-61 UNIX Symbolic Link (Symlink) Following",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-08T19:39:17.341Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "os",
          "product": "os",
          "programRoutines": [
            {
              "name": "rootOpenFileNolog"
            },
            {
              "name": "openRootInRoot"
            },
            {
              "name": "OpenInRoot"
            },
            {
              "name": "Root.Create"
            },
            {
              "name": "Root.Open"
            },
            {
              "name": "Root.OpenFile"
            },
            {
              "name": "Root.OpenRoot"
            },
            {
              "name": "Root.ReadFile"
            },
            {
              "name": "Root.WriteFile"
            },
            {
              "name": "rootFS.Open"
            },
            {
              "name": "rootFS.ReadDir"
            },
            {
              "name": "rootFS.ReadFile"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.12",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.5",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.2",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mundur (https://github.com/M0nd0R)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, \u0027root.Open(\"symlink/\")\u0027 will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-61: UNIX Symbolic Link (Symlink) Following",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T15:46:27.199Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79005"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
        },
        {
          "url": "https://go.dev/cl/797880"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4970"
        }
      ],
      "title": "Root escape via symlink plus trailing slash in os"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39822",
    "datePublished": "2026-07-08T15:46:27.199Z",
    "dateReserved": "2026-04-07T18:13:03.527Z",
    "dateUpdated": "2026-07-08T19:39:17.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39834 (GCVE-0-2026-39834)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-05-22 18:50

Title

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Summary

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 18:50 UTC

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/79567
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781663
https://pkg.go.dev/vuln/GO-2026-5020

Impacted products

1 product

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)

Credits

NCC Group Cryptography Services, sponsored by Teleport

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39834",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T18:50:30.848292Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T18:50:51.339Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "channel.WriteExtended"
            },
            {
              "name": "Dial"
            },
            {
              "name": "NewClientConn"
            },
            {
              "name": "NewServerConn"
            },
            {
              "name": "Session.CombinedOutput"
            },
            {
              "name": "Session.Output"
            },
            {
              "name": "Session.Run"
            },
            {
              "name": "Session.Shell"
            },
            {
              "name": "Session.Start"
            },
            {
              "name": "channel.Write"
            },
            {
              "name": "curve25519sha256.Client"
            },
            {
              "name": "curve25519sha256.Server"
            },
            {
              "name": "dhGEXSHA.Client"
            },
            {
              "name": "dhGEXSHA.Server"
            },
            {
              "name": "dhGroup.Client"
            },
            {
              "name": "dhGroup.Server"
            },
            {
              "name": "ecdh.Client"
            },
            {
              "name": "ecdh.Server"
            },
            {
              "name": "extChannel.Write"
            },
            {
              "name": "mlkem768WithCurve25519sha256.Client"
            },
            {
              "name": "mlkem768WithCurve25519sha256.Server"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "NCC Group Cryptography Services, sponsored by Teleport"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:27.540Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79567"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781663"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5020"
        }
      ],
      "title": "Invoking  infinite loop on large channel writes in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39834",
    "datePublished": "2026-05-22T02:31:27.540Z",
    "dateReserved": "2026-04-07T18:13:03.529Z",
    "dateUpdated": "2026-05-22T18:50:51.339Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41178 (GCVE-0-2026-41178)

Vulnerability from cvelistv5 – Published: 2026-06-04 14:38 – Updated: 2026-06-04 15:46

Title

OpenTelemetry-Go's baggage parsing no longer caps raw header length

Summary

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-04 15:46 UTC

CWE

CWE-789 - Memory Allocation with Excessive Size Value

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/open-telemetry/opentelemetry-g…	x_refsource_CONFIRM
https://github.com/open-telemetry/opentelemetry-g…	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version
open-telemetry	go.opentelemetry.io/otel/baggage	Affected: = 1.41.0 Affected: = 1.43.0
open-telemetry	go.opentelemetry.io/otel/propagation	Affected: = 1.41.0 Affected: = 1.43.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41178",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-04T15:46:06.715583Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-04T15:46:11.923Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go.opentelemetry.io/otel/baggage",
          "vendor": "open-telemetry",
          "versions": [
            {
              "status": "affected",
              "version": "= 1.41.0"
            },
            {
              "status": "affected",
              "version": "= 1.43.0"
            }
          ]
        },
        {
          "product": "go.opentelemetry.io/otel/propagation",
          "vendor": "open-telemetry",
          "versions": [
            {
              "status": "affected",
              "version": "= 1.41.0"
            },
            {
              "status": "affected",
              "version": "= 1.43.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "CWE-789: Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-04T14:38:23.707Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        },
        {
          "name": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        }
      ],
      "source": {
        "advisory": "GHSA-5wrp-cwcj-q835",
        "discovery": "UNKNOWN"
      },
      "title": "OpenTelemetry-Go\u0027s baggage parsing no longer caps raw header length"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41178",
    "datePublished": "2026-06-04T14:38:23.707Z",
    "dateReserved": "2026-04-17T16:34:45.526Z",
    "dateUpdated": "2026-06-04T15:46:11.923Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56853 (GCVE-0-2026-56853)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:23

Title

Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http

Summary

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:22 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80205
https://go.dev/cl/795540
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6089

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56853",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:22:45.475320Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:23:18.680Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "conn.readRequest"
            },
            {
              "name": "conn.serve"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.092Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80205"
        },
        {
          "url": "https://go.dev/cl/795540"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "title": "Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56853",
    "datePublished": "2026-08-13T21:58:53.092Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-08-14T15:23:18.680Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56858 (GCVE-0-2026-56858)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:32

Title

Fix Javascript regexp context tracking in html/template

Summary

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:31 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 76 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80435
https://go.dev/cl/807100
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6091

Impacted products

1 product

Vendor	Product	Version
Go standard library	html/template	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Ali Sherif

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:31:30.140536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:32:29.852Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "html/template",
          "product": "html/template",
          "programRoutines": [
            {
              "name": "tJS"
            },
            {
              "name": "Template.Execute"
            },
            {
              "name": "Template.ExecuteTemplate"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ali Sherif"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, pathological inputs could close an unescaped \u0027/\u0027 early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80435"
        },
        {
          "url": "https://go.dev/cl/807100"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "title": "Fix Javascript regexp context tracking in html/template"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56858",
    "datePublished": "2026-08-13T21:58:53.354Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:32:29.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:99960

CVE-2026-106445 (GCVE-0-2026-106445)

CVE-2026-106446 (GCVE-0-2026-106446)

CVE-2026-25681 (GCVE-0-2026-25681)

CVE-2026-27136 (GCVE-0-2026-27136)

CVE-2026-39821 (GCVE-0-2026-39821)

CVE-2026-39822 (GCVE-0-2026-39822)

CVE-2026-39834 (GCVE-0-2026-39834)

CVE-2026-41178 (GCVE-0-2026-41178)

CVE-2026-56853 (GCVE-0-2026-56853)

CVE-2026-56858 (GCVE-0-2026-56858)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour